Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-15693

Опубликовано: 26 дек. 2019
Источник: nvd
CVSS3: 7.2
CVSS2: 6.5
EPSS Низкий

Описание

TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which occurs in TightDecoder::FilterGradient. Exploitation of this vulnerability could potentially result into remote code execution. This attack appear to be exploitable via network connectivity.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:tigervnc:tigervnc:*:*:*:*:*:*:*:*
Версия до 1.10.1 (исключая)

EPSS

Процентиль: 93%
0.0938
Низкий

7.2 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-122
CWE-787

Связанные уязвимости

CVSS3: 7.2
ubuntu
около 6 лет назад

TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which occurs in TightDecoder::FilterGradient. Exploitation of this vulnerability could potentially result into remote code execution. This attack appear to be exploitable via network connectivity.

CVSS3: 7.2
redhat
около 6 лет назад

TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which occurs in TightDecoder::FilterGradient. Exploitation of this vulnerability could potentially result into remote code execution. This attack appear to be exploitable via network connectivity.

CVSS3: 7.2
debian
около 6 лет назад

TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow ...

CVSS3: 7.2
github
больше 3 лет назад

TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which occurs in TightDecoder::FilterGradient. Exploitation of this vulnerability could potentially result into remote code execution. This attack appear to be exploitable via network connectivity.

CVSS3: 7.2
fstec
около 6 лет назад

Уязвимость функции TightDecoder::FilterGradient программного обеспечения VNC TigerVNC, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

EPSS

Процентиль: 93%
0.0938
Низкий

7.2 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-122
CWE-787