Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2014-6055

Опубликовано: 30 сент. 2014
Источник: nvd
CVSS2: 6.5
EPSS Средний

Описание

Multiple stack-based buffer overflows in the File Transfer feature in rfbserver.c in LibVNCServer 0.9.9 and earlier allow remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a (1) long file or (2) directory name or the (3) FileTime attribute in a rfbFileTransferOffer message.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
Конфигурация 3

Одно из

cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_eus:6.5.z:*:*:*:*:*:*:*
Конфигурация 4
cpe:2.3:a:libvncserver:libvncserver:*:*:*:*:*:*:*:*
Версия до 0.9.9 (включая)

EPSS

Процентиль: 93%
0.11157
Средний

6.5 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu
почти 11 лет назад

Multiple stack-based buffer overflows in the File Transfer feature in rfbserver.c in LibVNCServer 0.9.9 and earlier allow remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a (1) long file or (2) directory name or the (3) FileTime attribute in a rfbFileTransferOffer message.

redhat
почти 11 лет назад

Multiple stack-based buffer overflows in the File Transfer feature in rfbserver.c in LibVNCServer 0.9.9 and earlier allow remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a (1) long file or (2) directory name or the (3) FileTime attribute in a rfbFileTransferOffer message.

debian
почти 11 лет назад

Multiple stack-based buffer overflows in the File Transfer feature in ...

github
около 3 лет назад

Multiple stack-based buffer overflows in the File Transfer feature in rfbserver.c in LibVNCServer 0.9.9 and earlier allow remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a (1) long file or (2) directory name or the (3) FileTime attribute in a rfbFileTransferOffer message.

oracle-oval
больше 10 лет назад

ELSA-2014-1827: kdenetwork security update (MODERATE)

EPSS

Процентиль: 93%
0.11157
Средний

6.5 Medium

CVSS2

Дефекты

CWE-119
Уязвимость CVE-2014-6055