{"api_version":"1","generated_at":"2026-07-23T08:11:08+00:00","cve":"CVE-2013-0131","urls":{"html":"https://cve.report/CVE-2013-0131","api":"https://cve.report/api/cve/CVE-2013-0131.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2013-0131","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2013-0131"},"summary":{"title":"CVE-2013-0131","description":"Buffer overflow in the NVIDIA GPU driver before 304.88, 310.x before 310.44, and 313.x before 313.30 for the X Window System on UNIX, when NoScanout mode is enabled, allows remote authenticated users to execute arbitrary code via a large ARGB cursor.","state":"PUBLISHED","assigner":"certcc","published_at":"2013-04-08 16:55:02","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-119","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.1","severity":"","vector":"AV:N/AC:H/Au:S/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:C/I:C/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://security.gentoo.org/glsa/glsa-201304-01.xml","name":"http://security.gentoo.org/glsa/glsa-201304-01.xml","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Gentoo Linux Documentation\n--\n  NVIDIA Drivers: Privilege escalation","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.kb.cert.org/vuls/id/771620","name":"http://www.kb.cert.org/vuls/id/771620","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"],"title":"Vulnerability Note VU#771620 - NVIDIA UNIX GPU driver ARGB cursor buffer overflow in \"NoScanout\" mode","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://nvidia.custhelp.com/app/answers/detail/a_id/3290","name":"http://nvidia.custhelp.com/app/answers/detail/a_id/3290","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"CVE-2013-0131: NVIDIA UNIX GPU Driver ARGB Cursor Buffer Overflow in \"NoScanout\" Mode.","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.nvidia.com/object/product-security.html","name":"http://www.nvidia.com/object/product-security.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"NVIDIA Product Security | NVIDIA","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-0131","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-0131","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2013","cve_id":"131","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nvidia","cpe5":"gpu_driver","cpe6":"195.22","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"esx","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"131","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nvidia","cpe5":"gpu_driver","cpe6":"195.22","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"freebsd","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"131","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nvidia","cpe5":"gpu_driver","cpe6":"195.22","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"linux_kernel","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"131","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nvidia","cpe5":"gpu_driver","cpe6":"195.22","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"sunos","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"131","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nvidia","cpe5":"gpu_driver","cpe6":"310.00","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"esx","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"131","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nvidia","cpe5":"gpu_driver","cpe6":"310.00","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"freebsd","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"131","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nvidia","cpe5":"gpu_driver","cpe6":"310.00","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"linux_kernel","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"131","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nvidia","cpe5":"gpu_driver","cpe6":"310.00","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"sunos","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"131","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nvidia","cpe5":"gpu_driver","cpe6":"313.00","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"esx","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"131","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nvidia","cpe5":"gpu_driver","cpe6":"313.00","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"freebsd","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"131","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nvidia","cpe5":"gpu_driver","cpe6":"313.00","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"linux_kernel","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"131","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nvidia","cpe5":"gpu_driver","cpe6":"313.00","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"sunos","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"131","vulnerable":"1","versionEndIncluding":"304.00","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nvidia","cpe5":"gpu_driver","cpe6":"*","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"esx","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"131","vulnerable":"1","versionEndIncluding":"304.00","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nvidia","cpe5":"gpu_driver","cpe6":"*","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"freebsd","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"131","vulnerable":"1","versionEndIncluding":"304.00","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nvidia","cpe5":"gpu_driver","cpe6":"*","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"linux_kernel","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"131","vulnerable":"1","versionEndIncluding":"304.00","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"nvidia","cpe5":"gpu_driver","cpe6":"*","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"sunos","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T14:18:09.115Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"GLSA-201304-01","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"],"url":"http://security.gentoo.org/glsa/glsa-201304-01.xml"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.nvidia.com/object/product-security.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://nvidia.custhelp.com/app/answers/detail/a_id/3290"},{"name":"VU#771620","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred"],"url":"http://www.kb.cert.org/vuls/id/771620"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2013-03-27T00:00:00.000Z","descriptions":[{"lang":"en","value":"Buffer overflow in the NVIDIA GPU driver before 304.88, 310.x before 310.44, and 313.x before 313.30 for the X Window System on UNIX, when NoScanout mode is enabled, allows remote authenticated users to execute arbitrary code via a large ARGB cursor."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2013-08-22T09:00:00.000Z","orgId":"37e5125f-f79b-445b-8fad-9564f167944b","shortName":"certcc"},"references":[{"name":"GLSA-201304-01","tags":["vendor-advisory","x_refsource_GENTOO"],"url":"http://security.gentoo.org/glsa/glsa-201304-01.xml"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.nvidia.com/object/product-security.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://nvidia.custhelp.com/app/answers/detail/a_id/3290"},{"name":"VU#771620","tags":["third-party-advisory","x_refsource_CERT-VN"],"url":"http://www.kb.cert.org/vuls/id/771620"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cert@cert.org","ID":"CVE-2013-0131","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Buffer overflow in the NVIDIA GPU driver before 304.88, 310.x before 310.44, and 313.x before 313.30 for the X Window System on UNIX, when NoScanout mode is enabled, allows remote authenticated users to execute arbitrary code via a large ARGB cursor."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"GLSA-201304-01","refsource":"GENTOO","url":"http://security.gentoo.org/glsa/glsa-201304-01.xml"},{"name":"http://www.nvidia.com/object/product-security.html","refsource":"CONFIRM","url":"http://www.nvidia.com/object/product-security.html"},{"name":"http://nvidia.custhelp.com/app/answers/detail/a_id/3290","refsource":"CONFIRM","url":"http://nvidia.custhelp.com/app/answers/detail/a_id/3290"},{"name":"VU#771620","refsource":"CERT-VN","url":"http://www.kb.cert.org/vuls/id/771620"}]}}}},"cveMetadata":{"assignerOrgId":"37e5125f-f79b-445b-8fad-9564f167944b","assignerShortName":"certcc","cveId":"CVE-2013-0131","datePublished":"2013-04-08T16:00:00.000Z","dateReserved":"2012-12-06T00:00:00.000Z","dateUpdated":"2024-08-06T14:18:09.115Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2013-04-08 16:55:02","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-119","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:C/I:C/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nvidia:gpu_driver:*:-:*:*:esx:*:*:*","versionEndIncluding":"304.00","matchCriteriaId":"5B0D1803-287B-4384-9B2D-BE93C743B378"},{"vulnerable":true,"criteria":"cpe:2.3:a:nvidia:gpu_driver:*:-:*:*:freebsd:*:*:*","versionEndIncluding":"304.00","matchCriteriaId":"ACA3AB89-8A19-4A1B-BF05-5B748FFB8526"},{"vulnerable":true,"criteria":"cpe:2.3:a:nvidia:gpu_driver:*:-:*:*:linux_kernel:*:*:*","versionEndIncluding":"304.00","matchCriteriaId":"9610E2B6-3EF5-4633-91EE-CDAA3A8A3650"},{"vulnerable":true,"criteria":"cpe:2.3:a:nvidia:gpu_driver:*:-:*:*:sunos:*:*:*","versionEndIncluding":"304.00","matchCriteriaId":"17EB76E8-6FAB-42D2-BED8-DFB7CC10C657"},{"vulnerable":true,"criteria":"cpe:2.3:a:nvidia:gpu_driver:195.22:-:*:*:esx:*:*:*","matchCriteriaId":"D4D3A62A-1CC2-4635-A6FA-4271948E81C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:nvidia:gpu_driver:195.22:-:*:*:freebsd:*:*:*","matchCriteriaId":"06B419F8-31A1-45A2-BE65-653EC6192FD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nvidia:gpu_driver:195.22:-:*:*:linux_kernel:*:*:*","matchCriteriaId":"E0AF1BC5-5677-4356-8B37-EB5CEDFB637D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nvidia:gpu_driver:195.22:-:*:*:sunos:*:*:*","matchCriteriaId":"37BDAF21-F044-4396-90E5-F33BDB973FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:nvidia:gpu_driver:310.00:-:*:*:esx:*:*:*","matchCriteriaId":"41D3FED5-9D68-4F67-85F2-61B963F5DC2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nvidia:gpu_driver:310.00:-:*:*:freebsd:*:*:*","matchCriteriaId":"5316C431-7394-4EED-8B01-5979E86AA7AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:nvidia:gpu_driver:310.00:-:*:*:linux_kernel:*:*:*","matchCriteriaId":"27F66892-C4F5-4C08-AD3D-2B96E3D1C473"},{"vulnerable":true,"criteria":"cpe:2.3:a:nvidia:gpu_driver:310.00:-:*:*:sunos:*:*:*","matchCriteriaId":"10A6AE1D-97AD-438F-8736-8C90CEEC87DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nvidia:gpu_driver:313.00:-:*:*:esx:*:*:*","matchCriteriaId":"44702200-39E6-4E5C-9E36-ADB50E1DA1B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nvidia:gpu_driver:313.00:-:*:*:freebsd:*:*:*","matchCriteriaId":"B9D507E6-A001-48FF-821A-79874AF4CDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nvidia:gpu_driver:313.00:-:*:*:linux_kernel:*:*:*","matchCriteriaId":"13DF1273-A4CC-4681-B2E3-898AD1C741C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nvidia:gpu_driver:313.00:-:*:*:sunos:*:*:*","matchCriteriaId":"AF7D66D4-3DF7-47EA-91E7-C54F98C60A42"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2013","CveId":"131","Ordinal":"1","Title":"CVE-2013-0131","CVE":"CVE-2013-0131","Year":"2013"},"notes":[{"CveYear":"2013","CveId":"131","Ordinal":"1","NoteData":"Buffer overflow in the NVIDIA GPU driver before 304.88, 310.x before 310.44, and 313.x before 313.30 for the X Window System on UNIX, when NoScanout mode is enabled, allows remote authenticated users to execute arbitrary code via a large ARGB cursor.","Type":"Description","Title":"CVE-2013-0131"},{"CveYear":"2013","CveId":"131","Ordinal":"2","NoteData":"2013-04-08","Type":"Other","Title":"Published"},{"CveYear":"2013","CveId":"131","Ordinal":"3","NoteData":"2013-08-22","Type":"Other","Title":"Modified"}]}}}