3 ms·
> Most of the vulnerabilities found ... were very basic mistakes, such as writing to user provided pointers blindly, disclosing uninitialised kernel memory to u
by ndesaulniers 10y ago
> Most of the vulnerabilities found ... were very basic mistakes, such as writing to user provided pointers blindly, disclosing uninitialised kernel memory to user mode, and incorrect bounds checking.
It's not just Windows drivers with these problems...
- sherincall 10y agoSome specific numbers: The patches from Tuesday fixed a total of 16 CVEs. 11 are Windows only, 4 are Windows+Unix[1], 1 is Unix only. 3 of those (Windows) CVEs were reported externally. http://nvidia.custhelp.com/app/answers/detail/a_id/4398 http://nvidia.custhelp.com/app/answers/detail/a_id/4398 Older bulletins: http://www.nvidia.com/object/product-security.html http://www.nvidia.com/object/product-security.html [1]: Unix in NVIDIA-speak generally means Linux+Solaris+FreeBSD