« Volver al listado

CVE-2007-3532

Estado: ModificadaAlta (7.2)—

NVIDIA drivers (nvidia-drivers) before 1.0.7185, 1.0.9639, and 100.14.11, as used in Gentoo Linux and possibly other distributions, creates /dev/nvidia* device files with insecure permissions, which allows local users to modify video card settings, cause a denial of service (crash or physical video card damage), and obtain sensitive information.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Nvidia — Video Driver

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-3532",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.2,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-07-27T22:30:00.000",
  "references": [
    {
      "url": "http://osvdb.org/40177",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/26497",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200708-14.xml",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/25360",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/25363",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://bugs.gentoo.org/show_bug.cgi?id=183567",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/40177",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/26497",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200708-14.xml",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/25360",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/25363",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugs.gentoo.org/show_bug.cgi?id=183567",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "NVIDIA drivers (nvidia-drivers) before 1.0.7185, 1.0.9639, and 100.14.11, as used in Gentoo Linux and possibly other distributions, creates /dev/nvidia* device files with insecure permissions, which allows local users to modify video card settings, cause a denial of service (crash or physical video card damage), and obtain sensitive information."
    },
    {
      "lang": "es",
      "value": "Controladores NVIDIA (nvidia-drivers) versiones anteriores a 1.0.7185, 1.0.9639 y 100.14.11, tal y como son usados en Gentoo Linux y posiblemente otras distribuciones, crea archivos de dispositivo /dev/nvidia* con permisos no confiables, lo que permite a usuarios locales modificar la configuración de la tarjeta de vídeo, causar una denegación de servicio (bloqueo o daño físico de tarjeta de vídeo) y obtener información confidencial."
    }
  ],
  "lastModified": "2026-06-16T22:42:14.103",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "647BA336-5538-4972-9271-383A0EC9378E"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:nvidia:video_driver:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F5C2A1DF-03BE-433B-89CD-EA6F6A0D942B",
              "versionEndIncluding": "1.0.7185"
            },
            {
              "criteria": "cpe:2.3:a:nvidia:video_driver:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "939DED83-5295-41F7-A05D-56F3C3B51C66",
              "versionEndIncluding": "1.0.9639"
            },
            {
              "criteria": "cpe:2.3:a:nvidia:video_driver:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CA6E15BA-CD96-41B5-951C-1C47CC22D7F4",
              "versionEndIncluding": "100.14.11"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}