Rapid7 has reported a vulnerability in NVIDIA Binary Graphics Driver for Linux, which can be exploited by malicious, local users to gain escalated privileges and potentially by malicious people to compromise a user's system.

A boundary error when performing accelerated rendering of glyphs can be exploited to cause a buffer overflow via a specially crafted short sequence of user-supplied glyphs.

Successful exploitation allows execution of arbitrary code with "root" privileges.

The vulnerability is reported in versions 8774 and 8762. Other versions may also be affected.

Solution
Disable accelerated rendering ("RenderAccel" option).
Further details available to Secunia VIM customers

Provided and/or discovered by
Derek Abdine, Rapid7.

Changelog
Further details available to Secunia VIM customers

Original Advisory
Rapid7:
http://www.rapid7.com/advisories/R7-0025.jsp

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers