Claims of a critical security vulnerability in Nvidia drivers

[Vesku]

http://www.ngohq.com/news/22819-critical-security-vulnerability-discovered-in-nvidia-forceware.html

"The service listens on a named pipe (\pipe\nsvr) which has a NULL DACL configured, which should mean that any logged on user or remote user in a domain context (Windows firewall/file sharing permitting) should be able to exploit this vulnerability."

Probably a good idea to check/update firewall settings.

 

[NIGELG]

What is going on with both AMD and Nvidia?

http://www.bit-tech.net/news/bits/2012/12/19/amd-catalyst-security/1

 

[Will Robinson]

What is going on with both AMD and Nvidia?

http://www.ngohq.com/news/22819-critical-security-vulnerability-discovered-in-nvidia-forceware.html

Gaining system admin rights via a buffer exploit will have the lights burning late in Santa Clara it seems.

 

[blastingcap]

Thanks OP. Shouldn't this post this get stickied or something for a while to warn people to upgrade their drivers the moment NV comes out with one that fixes it?

 

[Vesku]

http://securitytracker.com/id/1027927

I'd imagine that site will update when Nvidia has fixed the issue.

 

[Vesku]

Fixed drivers:

http://www.securityweek.com/nvidia-releases-fix-dangerous-display-driver-exploit