CVE-2013-0131

EPSS 4.81%
Veröffentlicht 08.04.2013 16:55:02
Zuletzt bearbeitet 29.04.2026 01:13:23
Erkennungen
Login

Buffer overflow in the NVIDIA GPU driver before 304.88, 310.x before 310.44, and 313.x before 313.30 for the X Window System on UNIX, when NoScanout mode is enabled, allows remote authenticated users to execute arbitrary code via a large ARGB cursor.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 7

NVD 16 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Nvidia ≫ Gpu Driver Update - SwEdition esx Version <= 304.00

Nvidia ≫ Gpu Driver Update - SwEdition freebsd Version <= 304.00

Nvidia ≫ Gpu Driver Update - SwEdition linux_kernel Version <= 304.00

Nvidia ≫ Gpu Driver Update - SwEdition sunos Version <= 304.00

Nvidia ≫ Gpu Driver Version 195.22 Update - SwEdition esx

Nvidia ≫ Gpu Driver Version 195.22 Update - SwEdition freebsd

Nvidia ≫ Gpu Driver Version 195.22 Update - SwEdition linux_kernel

Nvidia ≫ Gpu Driver Version 195.22 Update - SwEdition sunos

Nvidia ≫ Gpu Driver Version 310.00 Update - SwEdition esx

Nvidia ≫ Gpu Driver Version 310.00 Update - SwEdition freebsd

Nvidia ≫ Gpu Driver Version 310.00 Update - SwEdition linux_kernel

Nvidia ≫ Gpu Driver Version 310.00 Update - SwEdition sunos

Nvidia ≫ Gpu Driver Version 313.00 Update - SwEdition esx

Nvidia ≫ Gpu Driver Version 313.00 Update - SwEdition freebsd

Nvidia ≫ Gpu Driver Version 313.00 Update - SwEdition linux_kernel

Nvidia ≫ Gpu Driver Version 313.00 Update - SwEdition sunos

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	4.81%	0.908

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.1	3.9	10	AV:N/AC:H/Au:S/C:C/I:C/A:C

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://security.gentoo.org/glsa/glsa-201304-01.xml

http://www.nvidia.com/object/product-security.html

Patch

Vendor Advisory

http://nvidia.custhelp.com/app/answers/detail/a_id/3290

http://www.kb.cert.org/vuls/id/771620

US Government Resource

https://nvd.nist.gov/vuln/detail/CVE-2013-0131

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-0131

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-0131

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2013-0131