{"id":"CVE-2006-5379","aliases":["DEBIAN-CVE-2006-5379","EUVD-2006-5364","GHSA-fm97-p25w-w6fj"],"status":"published","title":"The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For...","description":"The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on other operating systems, allows local and remote attackers to execute arbitrary code via a large width value in a font glyph, which can be used to overwrite arbitrary memory locations.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.27375,"percentile":0.98076,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"published":"2006-10-18T04:06:00Z","modified":"2026-10-22T23:47:20Z","exploits":[{"source":"exploitdb","id":"EDB-2581","title":"Nvidia Graphics Driver 8774 - Local Buffer Overflow","type":"local","platform":"linux","date":"2006-10-16","verified":true,"url":"https://www.exploit-db.com/exploits/2581"}],"fixes":[{"ecosystem":"Debian:12","package":"nvidia-graphics-drivers","fixed_in":["1.0.8776-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"nvidia-graphics-drivers","fixed_in":["1.0.8776-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"nvidia-graphics-drivers","fixed_in":["1.0.8776-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"nvidia-graphics-drivers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.8776-1"}]}],"versions":["1.0.6629+1-2","1.0.7167-1","1.0.7174-1","1.0.7174-2","1.0.7174-3","1.0.7174-4","1.0.7664-1","1.0.7664-2","1.0.7667-1","1.0.7667-3","1.0.7676-1","1.0.7676-2","1.0.8174-1","1.0.8178-0bpo1","1.0.8178-1","1.0.8178-2","1.0.8178-3","1.0.8756-1","1.0.8756-2","1.0.8756-3","1.0.8756-4","1.0.8762-1","1.0.8762-2","1.0.8774-1","1.0.8774-2","1.0.8774-3","1.0.8774-4","1.0.8774-5","1.0.8774-6","1.0.8774-7"]},{"source":"osv","ecosystem":"Debian:13","package":"nvidia-graphics-drivers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.8776-1"}]}],"versions":["1.0.6629+1-2","1.0.7167-1","1.0.7174-1","1.0.7174-2","1.0.7174-3","1.0.7174-4","1.0.7664-1","1.0.7664-2","1.0.7667-1","1.0.7667-3","1.0.7676-1","1.0.7676-2","1.0.8174-1","1.0.8178-0bpo1","1.0.8178-1","1.0.8178-2","1.0.8178-3","1.0.8756-1","1.0.8756-2","1.0.8756-3","1.0.8756-4","1.0.8762-1","1.0.8762-2","1.0.8774-1","1.0.8774-2","1.0.8774-3","1.0.8774-4","1.0.8774-5","1.0.8774-6","1.0.8774-7"]},{"source":"osv","ecosystem":"Debian:14","package":"nvidia-graphics-drivers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.8776-1"}]}],"versions":["1.0.6629+1-2","1.0.7167-1","1.0.7174-1","1.0.7174-2","1.0.7174-3","1.0.7174-4","1.0.7664-1","1.0.7664-2","1.0.7667-1","1.0.7667-3","1.0.7676-1","1.0.7676-2","1.0.8174-1","1.0.8178-0bpo1","1.0.8178-1","1.0.8178-2","1.0.8178-3","1.0.8756-1","1.0.8756-2","1.0.8756-3","1.0.8756-4","1.0.8762-1","1.0.8762-2","1.0.8774-1","1.0.8774-2","1.0.8774-3","1.0.8774-4","1.0.8774-5","1.0.8774-6","1.0.8774-7"]}],"products":[{"vendor":"nvidia","product":"binary_graphics_driver"}],"references":[{"url":"http://www.vupen.com/english/advisories/2006/4053","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/22730","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://download2.rapid7.com/r7-0025/nv_exploit.c","tags":["x_refsource_MISC","x_transferred","Exploit","evidence"]},{"url":"http://security.gentoo.org/glsa/glsa-200611-03.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://www.securityfocus.com/bid/20559","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://securityreason.com/securityalert/1742","tags":["third-party-advisory","x_refsource_SREASON","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/usn-377-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102693-1","tags":["vendor-advisory","x_refsource_SUNALERT","x_transferred","web"]},{"url":"http://www.rapid7.com/advisories/R7-0025.jsp","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","advisory"]},{"url":"http://secunia.com/advisories/22419","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://securitytracker.com/id?1017072","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"http://www.kb.cert.org/vuls/id/147252","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","US Government Resource","web"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/29622","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"http://www.vupen.com/english/advisories/2006/4328","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/22676","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://nvidia.custhelp.com/cgi-bin/nvidia.cfg/php/enduser/std_adp.php?p_faqid=1971","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.securityfocus.com/archive/1/451329/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:007","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/23678","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://download2.rapid7.com/r7-0025/","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"http://www.securityfocus.com/archive/1/448860/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"http://secunia.com/advisories/22764","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-5379"},{"url":"http://download2.rapid7.com/r7-0025"},{"url":"https://github.com/advisories/GHSA-fm97-p25w-w6fj"},{"url":"https://security-tracker.debian.org/tracker/CVE-2006-5379","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2006-5379","description":"The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on other operating systems, allows local and remote attackers to execute arbitrary code via a large width value in a font glyph, which can be used to overwrite arbitrary memory locations.","status":"published","published":"2006-10-18T10:00:00Z","modified":"2024-08-07T19:48:30.1Z","updated_at":"2026-11-02T14:33:48.116532Z"}],"euvd":[{"id":"EUVD-2006-5364","description":"The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on other operating systems, allows local and remote attackers to execute arbitrary code via a large width value in a font glyph, which can be used to overwrite arbitrary memory locations.","status":"published","published":"2006-10-18T10:00:00Z","modified":"2024-08-07T19:48:30Z","updated_at":"2026-11-03T01:15:48.048675Z"}],"ghsa":[{"id":"GHSA-fm97-p25w-w6fj","title":"The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For...","description":"The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on other operating systems, allows local and remote attackers to execute arbitrary code via a large width value in a font glyph, which can be used to overwrite arbitrary memory locations.","status":"published","published":"2022-05-01T07:27:54Z","modified":"2025-04-09T03:33:30Z","updated_at":"2026-11-02T15:00:52.801688Z"}],"nvd":[{"id":"CVE-2006-5379","description":"The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on other operating systems, allows local and remote attackers to execute arbitrary code via a large width value in a font glyph, which can be used to overwrite arbitrary memory locations.","status":"published","published":"2006-10-18T04:06:00Z","modified":"2026-06-16T22:31:05.213Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:01:07.481037Z"}],"osv":[{"id":"CVE-2006-5379","description":"The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on other operating systems, allows local and remote attackers to execute arbitrary code via a large width value in a font glyph, which can be used to overwrite arbitrary memory locations.","status":"published","published":"2006-10-18T04:06:00Z","modified":"2026-04-10T03:37:49.810502Z","updated_at":"2026-11-02T15:43:56.865964Z"},{"id":"DEBIAN-CVE-2006-5379","description":"The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on other operating systems, allows local and remote attackers to execute arbitrary code via a large width value in a font glyph, which can be used to overwrite arbitrary memory locations.","status":"published","published":"2006-10-18T04:06:00Z","modified":"2026-10-22T23:47:20.021247294Z","updated_at":"2026-11-02T15:45:23.105674Z"}]}}