KernelTrap: Linux: NVIDIA Binary Graphics Driver Exploit

“A recent security advisory announced today by Rapid7 explains,
‘the NVIDIA Binary Graphics Driver for Linux is vulnerable to a
buffer overflow that allows an attacker to run arbitrary code as
root. This bug can be exploited both locally or remotely (via a
remote X client or an X client which visits a malicious web page).
A working proof-of-concept root exploit is attached to this
advisory.’ The advisory goes on to note that the FreeBSD and
Solaris binary drivers are also likely vulnerable to the same flaw
and cautions, ‘it is our opinion that NVIDIA’s binary driver
remains an unacceptable security risk based on the large numbers of
reproducible, unfixed crashes that have been reported in public
forums and bug databases…'”

Complete Story