NVIDIA Display Driver Service Remote Stack Buffer Overflow (credentialed check)

The NVIDIA Display Driver Service on the remote Windows host is affected by a remote stack-based buffer overflow. An authenticated, remote attacker, by connecting to the nsvr named pipe and making a specially crafted request, could exploit this to execute arbitrary code as SYSTEM. C Tenable Netwo...

Researcher Who Found Nvidia Bug Confirms Security Update Clears Up Driver Zero Day

Nvidia has released a new driver for its graphics cards that includes a security update for a zero-day vulnerability in the Nvidia Display Driver Service that came to light on Christmas day. UK researcher Peter Winter-Smith posted vulnerability details and an exploit to Pastebin describing a stac...

Nvidia显示驱动服务(nvvsvc.exe)权限提升漏洞

Nvidia 是全球图形技术和数字媒体处理器行业领导厂商。 Windows版Nvidia显示驱动服务中存在提权漏洞，允许能访问目标机器的攻击者创建有远程Root访问权限的超级用户，完全绕过DEP和ASLR保护。 该漏洞是由于没有检查memmove操作的拷贝数据而造成的栈溢出漏洞。一个绕过DEP + ASLR + /GS + CoE的利用公布在pastebin.com，目前已删除。 0 Nvidia Display Driver 厂商补丁： NVIDIA ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Nvidia Display Driver Service Attack Escalates Privileges on Windows Machines

There’s nothing like a zero-day to ruin the holiday break, but that’s just what may be in store for engineers at Nvidia after a researcher discovered a new vulnerability in the Nvidia Display Driver Service. The flaw could hand over administrator privileges on Windows machines to an attacker. Pet...

Nvidia (nvsvc) Display Driver Service Local Privilege Escalation

The named pipe, \pipe\nsvr, has a NULL DACL allowing any authenticated user to interact with the service. It contains a stacked based buffer overflow as a result of a memmove operation. Note the slight spelling differences: the executable is 'nvvsvc.exe', the service name is 'nvsvc', and the name...

CVE-2012-1510

Buffer overflow in the WDDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4.1; and VMware View before 4.6.1 allows guest OS users to gain guest OS privileges via unspecified vectors...

Null pointer dereference

The XPDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4.1; and VMware View before 4.6.1 allows guest OS users to gain guest OS privileges or cause a denial of service NULL pointer dereference via unspecified vectors...

Buffer overflow

Buffer overflow in the WDDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4.1; and VMware View before 4.6.1 allows guest OS users to gain guest OS privileges via unspecified vectors...

CVE-2012-1508

The XPDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4.1; and VMware View before 4.6.1 allows guest OS users to gain guest OS privileges or cause a denial of service NULL pointer dereference via unspecified vectors...

CVE-2012-1509

Buffer overflow in the XPDM display driver in VMware View before 4.6.1 allows guest OS users to gain guest OS privileges via unspecified vectors...

CVE-2012-1509

Buffer overflow in the XPDM display driver in VMware View before 4.6.1 allows guest OS users to gain guest OS privileges via unspecified vectors...

CVE-2012-1508

CVE-2012-1508 affects the XPDM display driver in VMware products (ESXi/ESX 4.0–4.1 and 5.0; View prior to 4.6.1). The issue is a NULL pointer dereference in the XPDM/WDDM display stack that can allow guest-OS privilege escalation or cause a guest-OS denial of service via unspecified vectors. Conn...

CVE-2012-1509

CVE-2012-1509 is tied to VMware View: a buffer overflow in the XPDM display driver within View (before 4.6.1) that enables local guest-OS privilege escalation via unspecified vectors. The issue is part of VMware advisory VMSA-2012-0004, which documents multiple View-related vulnerabilities and re...

CVE-2012-1508

The XPDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4.1; and VMware View before 4.6.1 allows guest OS users to gain guest OS privileges or cause a denial of service NULL pointer dereference via unspecified vectors...

CVE-2012-1510

Buffer overflow in the WDDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4.1; and VMware View before 4.6.1 allows guest OS users to gain guest OS privileges via unspecified vectors...

CVE-2012-1510: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the WDDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4.1; and VMware View before 4.6.1 allows guest OS users to gain guest OS privileges via unspecified vectors...

CVE-2012-1509: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the XPDM display driver in VMware View before 4.6.1 allows guest OS users to gain guest OS privileges via unspecified vectors...

CVE-2012-1508: Undefined Security Weakness

The XPDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4.1; and VMware View before 4.6.1 allows guest OS users to gain guest OS privileges or cause a denial of service NULL pointer dereference via unspecified vectors...

MS Patch Tuesday: Googler Zero-Day Fixed in 33 Days

Last month, when Google researcher Tavis Ormandy released details on a critical Help and Support Center vulnerability that exposed Windows XP and Windows Server 2003 users to malicious hacker attacks, Microsoft was publicly unhappy with the decision. Ormandy claims he spent five days negotiating...

MS10-043: Vulnerability in Canonical Display Driver Could Allow Remote Code Execution (2032276)

A flaw exists in the way the Microsoft Canonical Display Driver cdd.dll parses information copied from user mode to kernel mode. If the Windows Aero theme is enabled, an attacker who tricks a user on the affected host into viewing a specially crafted image using an application that uses the APIs...