Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-5885

Опубликовано: 28 фев. 2017
Источник: nvd
CVSS3: 9.8
CVSS2: 7.5
EPSS Низкий

Описание

Multiple integer overflows in the (1) vnc_connection_server_message and (2) vnc_color_map_set functions in gtk-vnc before 0.7.0 allow remote servers to cause a denial of service (crash) or possibly execute arbitrary code via vectors involving SetColorMapEntries, which triggers a buffer overflow.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:fedoraproject:fedora:25:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:a:gnome:gtk-vnc:*:*:*:*:*:*:*:*
Версия до 0.6.0 (включая)

EPSS

Процентиль: 70%
0.0065
Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-190

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 8 лет назад

Multiple integer overflows in the (1) vnc_connection_server_message and (2) vnc_color_map_set functions in gtk-vnc before 0.7.0 allow remote servers to cause a denial of service (crash) or possibly execute arbitrary code via vectors involving SetColorMapEntries, which triggers a buffer overflow.

CVSS3: 3.1
redhat
почти 9 лет назад

Multiple integer overflows in the (1) vnc_connection_server_message and (2) vnc_color_map_set functions in gtk-vnc before 0.7.0 allow remote servers to cause a denial of service (crash) or possibly execute arbitrary code via vectors involving SetColorMapEntries, which triggers a buffer overflow.

CVSS3: 9.8
debian
больше 8 лет назад

Multiple integer overflows in the (1) vnc_connection_server_message an ...

CVSS3: 9.8
github
больше 3 лет назад

Multiple integer overflows in the (1) vnc_connection_server_message and (2) vnc_color_map_set functions in gtk-vnc before 0.7.0 allow remote servers to cause a denial of service (crash) or possibly execute arbitrary code via vectors involving SetColorMapEntries, which triggers a buffer overflow.

suse-cvrf
около 4 лет назад

Security update for gtk-vnc

EPSS

Процентиль: 70%
0.0065
Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-190