Critical Security Problem in Nvidia's Drivers, Exploit Code Circulated
A software developer has posted details about a vulnerability in Nvidia's graphics driver that could allow an attacker to gain control over a user's computer.
According to Peter Winter-Smith's post on Pastebin, the problem is anchored in nvvsvc.exe, a file that is used in the Nvidia display driver service. The file is reportedly is vulnerable to a buffer overflow and code injection attack. Since nvvsvc.exe runs with full system access rights, the developer claims that any program can be installed by an attacker.
While the information on how the issue can be exploited is currently freely available and the exploit code circulated by Winter-Smith, it is unclear how the exploit could target a client PC and how it could be triggered. In his test setup, he used a Dell XPS 15 system with a GT540M GPU running under Windows 7 (64-bit). He also noted that he ran the test with full administrator rights on the PC with unrestricted access to the computer.
Nvidia has not reacted to the report yet and the post on Pastebin was removed with the comment: "I'm sorry to say that I've had to remove this post - it has caused some trouble for a few friends of mine and I didn't intend for that to happen." However, the author announced his discovery on several forums and websites, including attachments with the exploit code.

Yes, AMD/ATI drivers are much better.
Unless ATI does something really stupid, I will never use Nvidia's half...... hardware.
Google or search: 'ATI driver exploits' or pretty much any primary program your PC uses and at one point or another chances are someone hacked into it...
I sense a deep and scathing sense of sarcasm in this comment.
While typing it, I was afraid of that...
Yeah, I was like...wait, he is being sarcastic, right? The "/sarcasm" tag is your friend...
I'm not being sarcastic. This article is about Nvidia driver security vulnerabilities. I am supporting AMD. Without AMD, we'd all be paying Intel $1000+ for any powerful CPU, and we'll all be paying Nvidia almost as much for a powerful graphics card. Join me, plant a tree, support AMD.
I would like to suggest a new years resolution that everyone support both camps because without both doing well we get high prices and stagnation.
By that reasoning, you should buy Texas Instruments ARM processors!
Which I do recommend, actually.
Raspberry Pi, 700Mhz ARM CPU, Samsung GPU, 1080p HDMI output,
$35 for a complete board turned out to be a very good price for me!
All I can say about ATI is... "I had a bad experience."
Several actually. Always, actually.
Great hardware, terrible software: ATI, HP (commercial), Samsung (stock Galaxy S3 anyone?), the list goes on.
so use vista for hearing sound but sound driver is very old ,and xp for using programs in 160gb hdd 5400rpm.two os and softwares takes 50gb.
after win7 comes my problem solved (after two years I am get good sound in my laptop 2009drivers by updating windows(before iam use 2002 driver files in xp given by hp ,2004 driver files for vista)(hp not give drivers for win7)"so how much time taken for good driver files" .then now iam use win7 ultimate 32bit in it all softwares work fine only one os so save hdd space.hdd driver Intel rapid storage work fine in only win7. IT'S THE REAL WORLD.
So don't tease others.
As I read this, I'm assuming that by saying AMD over & over, you mean ATI.
I wouldn't be able to speak firsthand about GPU *or* CPU updates from ATI or AMD since this fall because I bought an NVidia and Intel layout in spring.
For high end boards, a complete Intel system is often cheaper per operation/per-second than AMD.
ATI vs NVidia... Hardware top-performance honors vary year by year but traditionally I have found NVidia software to be much more robust, functional & reliable while I otherwise would prefer the ATI hardware.
agreed what a db. you want the publicity just say you found a vulnerability and tell nvidia. no need to publish code and all the info to put millions of pc's at risk.
yea cause if you google "Linux kernel vulnerability" the kernel is rock solid. if anyone cared enough to actually look for linux vulnerabilities like the do on windows it would be torn to shreds.