NVIDIA UNIX Driver VGA Window Local Privilege Escalation Vulnerability

Bugtraq ID:	54772
Class:	Unknown
CVE:	CVE-2012-4225
Remote:	No
Local:	Yes
Published:	Aug 01 2012 12:00AM
Updated:	Apr 09 2013 03:28AM
Credit:	Anonymous
Vulnerable:	Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 11.10 i386 Ubuntu Ubuntu Linux 11.10 amd64 Ubuntu Ubuntu Linux 11.04 powerpc Ubuntu Ubuntu Linux 11.04 i386 Ubuntu Ubuntu Linux 11.04 ARM Ubuntu Ubuntu Linux 11.04 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 NVIDIA Unix Driver 295.40 NVIDIA Unix Driver 295.39 Gentoo Linux
Not Vulnerable:

NVIDIA UNIX Driver VGA Window Local Privilege Escalation Vulnerability

NVIDIA UNIX Driver is prone to a local privilege-escalation vulnerability.

A local attacker may exploit this issue to gain escalated privileges and execute arbitrary code with root privileges. Successful exploits will result in the complete compromise of affected computers.

NVIDIA UNIX Driver VGA Window Local Privilege Escalation Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/54772.c

NVIDIA UNIX Driver VGA Window Local Privilege Escalation Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.

NVIDIA UNIX Driver VGA Window Local Privilege Escalation Vulnerability

References:

• Vendor Home Page (NVidia)