Nvidia’s Mental Ray high-performance 3D-rendering program has a disadvantage that could be exploited to concede clusters of specialized computers called describe farms, according to researchers from ReVuln.
”There is a disadvantage inspiring Nvidia mental ray (raysat) chronicle 3.11.1.10, that allows a antagonistic user to bucket capricious DLLs on a plant system, so an assailant can take control over a whole describe plantation by simply injecting a antagonistic remote library,” pronounced Luigi Auriemma and Donato Ferrante, confidence researchers and founders of Malta-based disadvantage investigate ReVuln, Tuesday in a research paper.
The Nvidia Mental Ray can use CUDA-enabled consumer or veteran GPUs like a Nvidia GeForce, Quadro, and Tesla models for together rendering. It’s ordinarily used in a film attention for CGI (computer-generated imagery) effects, though also in industries that rest on computer-aided pattern (CAD).
Mental Ray is accessible as a stand-alone focus for Windows, Mac, and Linux that can be commissioned and used on dedicated describe machines. However, it is also integrated into third-party program like Autodesk 3ds Max, Autodesk Maya, Cinema 4D, and others.
A describe farm’s computing energy varies depending on a size. Industrial Light Magic, an American visible effects company, used a describe plantation with entrance to 5,700 processor cores when it worked on a Transformers 2 film in 2009.
How it works
On Windows, Nvidia Mental Ray runs as a complement use and listens for incoming connectors on pier 7520, a ReVuln researchers said. To feat a vulnerability, an assailant only needs to send a antagonistic parcel to a influenced systems from a compromised mechanism on a same network, they said.
Post-exploitation scenarios could embody regulating compromised describe farms for cue enormous or mining bitcoins, given both tasks can be distributed opposite many GPUs, a researchers said.
An instance of a antagonistic parcel that triggers a disadvantage in a Mental Ray program was enclosed in ReVuln’s investigate paper, though a association did not news a emanate to Nvidia. ReVuln discloses a vulnerabilities found by a researchers publicly or sells a information to third parties by a subscription-based disadvantage comprehension service.
Nvidia did not immediately respond to a ask for comment.
Recent Comments