CVE-2013-5987

Unspecified vulnerability in NVIDIA graphics driver Release 331, 325, 319, 310, and 304 allows local users to bypass intended access restrictions for the GPU and gain privileges via unknown vectors.

CVSS v2.0 7.2 HIGH

7.2^/10

CVSS v2.0 : HIGH

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://marc.info/?l=bugtraq&m=139965942001604&w=2	Third Party Advisory
http://nvidia.custhelp.com/app/answers/detail/a_id/3377	Vendor Advisory
http://support.apple.com/kb/HT6150	Third Party Advisory
http://marc.info/?l=bugtraq&m=139965942001604&w=2	Third Party Advisory
http://nvidia.custhelp.com/app/answers/detail/a_id/3377	Vendor Advisory
http://support.apple.com/kb/HT6150	Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:nvidia:gpu_driver:304.00:-:::unix:::*
	cpe:2.3:a:nvidia:gpu_driver:304.00:-:::windows:::*
	cpe:2.3:a:nvidia:gpu_driver:310.00:-:::windows:::*
	cpe:2.3:a:nvidia:gpu_driver:319.00:-:::unix:::*
	cpe:2.3:a:nvidia:gpu_driver:319.00:-:::windows:::*
	cpe:2.3:a:nvidia:gpu_driver:325.00:-:::windows:::*
	cpe:2.3:a:nvidia:gpu_driver:331.00:-:::unix:::*
	cpe:2.3:a:nvidia:gpu_driver:331.00:-:::windows:::*

Configuration 2 (hide)

cpe:2.3:o:apple:mac_os_x:10.9.1:*:*:*:*:*:*:*

History

21 Nov 2024, 01:58

Type	Values Removed	Values Added
References	~~() http://marc.info/?l=bugtraq&m=139965942001604&w=2 - Third Party Advisory~~	() http://marc.info/?l=bugtraq&m=139965942001604&w=2 - Third Party Advisory
References	~~() http://nvidia.custhelp.com/app/answers/detail/a_id/3377 - Vendor Advisory~~	() http://nvidia.custhelp.com/app/answers/detail/a_id/3377 - Vendor Advisory
References	~~() http://support.apple.com/kb/HT6150 - Third Party Advisory~~	() http://support.apple.com/kb/HT6150 - Third Party Advisory

Information

Published : 2014-01-21 18:55

Updated : 2024-11-21 01:58

NVD link : CVE-2013-5987

Mitre link : CVE-2013-5987

CVE.ORG link : CVE-2013-5987

JSON object : View

Products Affected

apple

mac_os_x

nvidia

gpu_driver

CWE

NVD-CWE-noinfo

{"id": "CVE-2013-5987", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": true, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-01-21T18:55:09.710", "references": [{"url": "http://marc.info/?l=bugtraq&m=139965942001604&w=2", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://nvidia.custhelp.com/app/answers/detail/a_id/3377", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://support.apple.com/kb/HT6150", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://marc.info/?l=bugtraq&m=139965942001604&w=2", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://nvidia.custhelp.com/app/answers/detail/a_id/3377", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://support.apple.com/kb/HT6150", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in NVIDIA graphics driver Release 331, 325, 319, 310, and 304 allows local users to bypass intended access restrictions for the GPU and gain privileges via unknown vectors."}, {"lang": "es", "value": "Vulnerabilidad sin especificar en los drivers gr\u00e1ficos de NVIDIA Release 331, 325, 319, 310, y 304 permite a usuarios locales evadir restricciones de acceso intencionadas para la GPU y obtener privilegios a trav\u00e9s de vectores desconocidos."}], "lastModified": "2024-11-21T01:58:33.827", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nvidia:gpu_driver:304.00:-:*:*:unix:*:*:*", "vulnerable": true, "matchCriteriaId": "61A310E4-2A3A-4F41-882F-2AB0CFF69571"}, {"criteria": "cpe:2.3:a:nvidia:gpu_driver:304.00:-:*:*:windows:*:*:*", "vulnerable": true, "matchCriteriaId": "103E152A-1414-4FE6-8081-479C81904478"}, {"criteria": "cpe:2.3:a:nvidia:gpu_driver:310.00:-:*:*:windows:*:*:*", "vulnerable": true, "matchCriteriaId": "5B6EB66C-6438-4A75-863F-33475C906399"}, {"criteria": "cpe:2.3:a:nvidia:gpu_driver:319.00:-:*:*:unix:*:*:*", "vulnerable": true, "matchCriteriaId": "5049965F-E2DA-4F60-B7BD-4F43CE5E15E3"}, {"criteria": "cpe:2.3:a:nvidia:gpu_driver:319.00:-:*:*:windows:*:*:*", "vulnerable": true, "matchCriteriaId": "C56BFE64-F0E2-495D-AFC6-2ABF02020168"}, {"criteria": "cpe:2.3:a:nvidia:gpu_driver:325.00:-:*:*:windows:*:*:*", "vulnerable": true, "matchCriteriaId": "7E6E6EAB-9BE9-44EC-9E70-E49DF070274D"}, {"criteria": "cpe:2.3:a:nvidia:gpu_driver:331.00:-:*:*:unix:*:*:*", "vulnerable": true, "matchCriteriaId": "36D905D4-53A9-41A6-BBE2-4F39AFD93224"}, {"criteria": "cpe:2.3:a:nvidia:gpu_driver:331.00:-:*:*:windows:*:*:*", "vulnerable": true, "matchCriteriaId": "18F345BD-14CF-4C58-A895-60885595E210"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:mac_os_x:10.9.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F241EBFB-CCB3-4D16-B476-AC1578D3C435"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}