Graphics drivers often get flak for compatibility issues and overzealous optimizations, but we rarely hear about security holes. There are exceptions for everything, though. Threatpost reports that a freshly discovered vulnerability in Nvidia's Display Driver Service "could hand over administrator privileges on Windows machines to an attacker."
UK security researcher Peter Winter-Smith posted the exploit to Pastebin earlier this week. He wrote up the following explanation, as well:
Here is an interesting exploit for a stack buffer overflow in the NVidia Display Driver Service. The service listens on a named pipe (\pipe\nsvr) which has a NULL DACL configured, which should mean that any logged on user or remote user in a domain context (Windows firewall/file sharing permitting) should be able to exploit this vulnerability. . . . The buffer overflow occurs as a result of a bad memmove operation.
(Curious-minded readers can check the Pastebin posting for more details.)
Apparently, Winter-Smith didn't tip Nvidia off before sharing the exploit publicly. That's because, he says, "The risk from this particular flaw being exploited was (is) sufficiently low that I didn't think it would warrant the wait." Quoting the researcher, Threatpost explains that the exploit mainly affects "domain-based machine[s]" with "relaxed firewall rules" and file sharing enabled.
Well, at least that part is reassuring, I guess. Here's hoping Nvidia addresses the problem soon. In the meantime, keep your firewalls up!
|Radeon Pro specs hint at a full-fat Polaris 11 GPU in MacBook Pros||5|
|We're giving away our Aimpad R5 review unit||7|
|Apple's latest MacBook Pros ditch the F keys||63|
|In the lab: Gigabyte's GeForce GTX 1050 G1 Gaming graphics card||6|
|Google's Jamboard takes the whiteboard into the cloud||8|
|Transcend hops on the 3D NAND bandwagon with the SSD 230||1|
|Apple puts its AirPods in the oven a little longer||29|
|Microsoft helps hardware companies make VR more affordable||17|
|Intel P3100 M.2 SSD has datacenters in mind||9|
|Absolutely. GCN is pretty much GCN, so the math backs this up: R9 290X = 1GHz x 2816 GCN CUs = 2816 CUGHz (pronounced "cougar hertz") RX 480 = 1.27GHz...||+43|