Debian Security Advisory DSA 3066-1 (qemu - security update)

Several vulnerabilities were discovered in qemu, a fast processor emulator. CVE-2014-3689 The Advanced Threat Research team at Intel Security reported that guest provided parameter were insufficiently validated in rectangle functions in the vmware-vga driver. A privileged guest user could use thi...

DSA-3067-1 qemu-kvm - security update

Bulletin has no description...

PT-2014-5810

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.x Description The issue concerns the mdp lut hw update function in the MDP display driver, which does not validate certain start and length values within an ioctl call. This allows attackers to gain privileges via a...

PT-2015-6811

Name of the Vulnerable Software and Affected Versions QEMU versions prior to 2.1.0 Description The issue is related to an integer overflow in the VNC display driver of the QEMU emulator. This overflow can be triggered by a CLIENT CUT TEXT message, leading to an infinite loop and eventually causin...

NVidia Display Driver Service (Nsvr) Exploit

No description provided by source. / NVidia Display Driver Service Nsvr Exploit - Christmas 2012 - Bypass DEP + ASLR + /GS + CoE ============================================================= @peterwintrsmith Initial release 25/12/12 Update 25/12/12 - Target for 30 Aug 2012 nvvsvc.exe Build - than...

qemu -- denial of service vulnerability in VNC

Prasad J Pandit, Red Hat Product Security Team, reports: Qemu emulator built with the VNC display driver is vulnerable to an infinite loop issue. It could occur while processing a CLIENTCUTTEXT message with specially crafted payload message. A privileged guest user could use this flaw to crash th...

PT-2017-15456

Name of the Vulnerable Software and Affected Versions QEMU versions prior to 1.7.2 Description An out-of-bounds memory access issue was found in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the vnc refresh server surface function. A user inside a...

Windows Display Driver Enumeration

Binary data wmienumdisplaydrivers.nbin...

Nvidia (nvsvc) Display Driver Service Local Privilege Escalation

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex' require 'msf/core/post/common' require 'msf/core/post/windows/priv' require 'msf/core/post/windows/process' require...

Nvidia (nvsvc) Display Driver Service Local Privilege Escalation

Exploit for windows platform in category local exploits require 'msf/core' require 'rex' require 'msf/core/post/common' require 'msf/core/post/windows/priv' require 'msf/core/post/windows/process' require 'msf/core/post/windows/reflectivedllinjection' require 'msf/core/post/windows/services' clas...

CVE-2013-0109

The NVIDIA driver before 307.78, and Release 310 before 311.00, in the NVIDIA Display Driver service on Windows does not properly handle exceptions, which allows local users to gain privileges or cause a denial of service memory overwrite via a crafted application...

CVE-2013-0109

The NVIDIA driver before 307.78, and Release 310 before 311.00, in the NVIDIA Display Driver service on Windows does not properly handle exceptions, which allows local users to gain privileges or cause a denial of service memory overwrite via a crafted application...

PT-2013-2103

Name of the Vulnerable Software and Affected Versions NVIDIA Display Driver versions prior to 307.78 NVIDIA Display Driver Release 310 versions prior to 311.00 Description The issue allows local users to gain privileges or cause a denial of service due to improper exception handling by the NVIDIA...

CVE-2013-0109: Improper Restriction of Operations within the Bounds of a Memory Buffer

The NVIDIA driver before 307.78, and Release 310 before 311.00, in the NVIDIA Display Driver service on Windows does not properly handle exceptions, which allows local users to gain privileges or cause a denial of service memory overwrite via a crafted application...

CVE-2013-0241

The QXL display driver in QXL Virtual GPU 0.1.0 allows local users to cause a denial of service guest crash or hang via a SPICE connection that prevents other threads from obtaining the qemumutex mutex. NOTE: some of these details are obtained from third party information...

CVE-2013-0241

CVE-2013-0241 affects the QXL display driver (QXL Virtual GPU 0.1.0) used by the xorg-x11-qxl and related drivers. The issue is a local denial-of-service condition where a SPICE connection can cause a guest crash or hang by preventing other threads from obtaining the qemu_mutex mutex. This vulner...

qxl: synchronous io guest DoS

The QXL display driver in QXL Virtual GPU 0.1.0 allows local users to cause a denial of service guest crash or hang via a SPICE connection that prevents other threads from obtaining the qemumutex mutex. NOTE: some of these details are obtained from third party information...

CVE-2013-0241

The QXL display driver in QXL Virtual GPU 0.1.0 allows local users to cause a denial of service guest crash or hang via a SPICE connection that prevents other threads from obtaining the qemumutex mutex. NOTE: some of these details are obtained from third party information...

NVidia Display Driver Service (Nsvr) Exploit

Exploit for windows platform in category local exploits / NVidia Display Driver Service Nsvr Exploit - Christmas 2012 - Bypass DEP + ASLR + /GS + CoE ============================================================= @peterwintrsmith Initial release 25/12/12 Update 25/12/12 - Target for 30 Aug 2012...

NVidia Display Driver Buffer Overflow

/ NVidia Display Driver Service Nsvr Exploit - Christmas 2012 - Bypass DEP + ASLR + /GS + CoE ============================================================= @peterwintrsmith Initial release 25/12/12 Update 25/12/12 - Target for 30 Aug 2012 nvvsvc.exe Build - thanks @seanderegge! Hey all! Here is a...