CVE-2006-5379 in the critical feed json
The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on ot…
published 2006-10-18 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-5364
- cvss
- 7.5
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 27.4%
- EPSS 27.4% chance of exploitation in 30 days, percentile 98%
- public exploits
- 1
- Exploit-DB
Summary
The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on other operating systems, allows local and remote attackers to execute arbitrary code via a large width value in a font glyph, which can be used to overwrite arbitrary memory locations.
Patch / fix
- nvidia-graphics-drivers Debian 14, Debian 13, Debian 12 1.0.8776-1
debian advisories DEBIAN-CVE-2006-5379
Timeline
- First public exploit (EDB-2581)
- Published
Exploit prediction
27.38% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-2581 Nvidia Graphics Driver 8774 - Local Buffer Overflow local, 2006-10-16
- download2.rapid7.com http://download2.rapid7.com/r7-0025/nv_exploit.c referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
References
-
download2.rapid7.com
/r7-0025/nv_exploit.c
exploit
-
security.gentoo.org
/glsa/glsa-200611-03.xml
vendor-advisory
-
ubuntu.com
/usn/usn-377-1
vendor-advisory
-
sunsolve.sun.com
/search/document.do?assetkey=1-26-102693-1
vendor-advisory
-
mandriva.com
/security/advisories?name=MDKSA-2007:007
vendor-advisory
-
rapid7.com
/advisories/R7-0025.jsp
vendor-advisory
-
secunia.com
/advisories/22419
third-party-advisory, vendor-advisory
-
vupen.com
/english/advisories/2006/4053
vdb-entry
-
secunia.com
/advisories/22730
third-party-advisory
-
securityfocus.com
/bid/20559
vdb-entry
-
securityreason.com
/securityalert/1742
third-party-advisory
-
securitytracker.com
/id?1017072
vdb-entry
-
kb.cert.org
/vuls/id/147252
third-party-advisory, us-government-resource
-
exchange.xforce.ibmcloud.com
/vulnerabilities/29622
vdb-entry
-
vupen.com
/english/advisories/2006/4328
vdb-entry
-
secunia.com
/advisories/22676
third-party-advisory
- nvidia.custhelp.com /cgi-bin/nvidia.cfg/php/enduser/std_adp.php?p_faqid=1971
-
securityfocus.com
/archive/1/451329/100/0/threaded
mailing-list
-
secunia.com
/advisories/23678
third-party-advisory
- download2.rapid7.com /r7-0025/
-
securityfocus.com
/archive/1/448860/100/0/threaded
mailing-list
-
secunia.com
/advisories/22764
third-party-advisory
Sources
- CVE List CVE-2006-5379
- NVD CVE-2006-5379
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.