CVE-2012-4225

high

Description

NVIDIA UNIX graphics driver before 295.71 and before 304.32 allows local users to write to arbitrary physical memory locations and gain privileges by modifying the VGA window using /dev/nvidia0.

References

http://www.openwall.com/lists/oss-security/2012/08/08/4

http://www.openwall.com/lists/oss-security/2012/08/01/1

http://security.gentoo.org/glsa/glsa-201304-01.xml

http://seclists.org/fulldisclosure/2012/Aug/76

http://seclists.org/fulldisclosure/2012/Aug/4

http://nvidia.custhelp.com/app/answers/detail/a_id/3140

Details

Source: Mitre, NVD

Published: 2012-11-19

Updated: 2013-08-22

Risk Information

CVSS v2

Base Score: 7.2

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 7.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H