Page 7 of 7 FirstFirst ... 567
Results 61 to 63 of 63

Thread: Heads up: Nvidia possibly vulnerable

  1. #61
    Join Date
    Jul 2005
    Location
    USA (Springfield,Vermont)
    Beans
    755
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: Heads up: Nvidia possibly vulnerable

    Can I be attacked just by being connected to the internet?

  2. #62
    Join Date
    Apr 2006
    Beans
    543

    Re: Heads up: Nvidia possibly vulnerable

    Ubuntu is going to come with Nvidia drivers default, then news of possible exploits comes up. Compaines start producing Mac OS X virus programs news about OS X virus start popping up everywhere. Something smells fishy

  3. #63
    Join Date
    Oct 2005
    Beans
    1,887

    Re: Heads up: Nvidia possibly vulnerable

    Seems like the fix is already released for Dapper and Edgy: https://launchpad.net/distros/ubuntu....17/+bug/46034 (see status) so you shouldn't have any problems if you recently updated your system. Anyhow, assuming you still have the vulnerable driver:

    Quote Originally Posted by RJARRRPCGP View Post
    Can I be attacked just by being connected to the internet?
    probably no if you don't accept remote X connections:
    It is important to note that glyph data is supplied to the X server
    by the X client. Any remote X client can gain root privileges on
    the X server using the proof of concept program attached.

    It is also trivial to exploit this vulnerability as a DoS by causing
    an existing X client program (such as Firefox) to render a long text
    string. It may be possible to use Flash movies, Java applets, or
    embedded web fonts to supply the custom glyph data necessary for
    reliable remote code execution.

    A simple HTML page containing an INPUT field with a long value is
    sufficient to demonstrate the DoS.
    I don't think anyone out there could send some glyph data to your X client just because you're online. But then again, I don't really know what I'm talking about...

Page 7 of 7 FirstFirst ... 567

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •