Описание
Integer overflow in the MallocFrameBuffer function in vncviewer.c in LibVNCServer 0.9.9 and earlier allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitrary code via an advertisement for a large screen size, which triggers a heap-based buffer overflow.
An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way screen sizes were handled by LibVNCServer. A malicious VNC server could use this flaw to cause a client to crash or, potentially, execute arbitrary code in the client.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | kdenetwork | Not affected | ||
| Red Hat Enterprise Linux 6 | kdenetwork | Not affected | ||
| Red Hat Enterprise Linux 7 | kdenetwork | Not affected | ||
| Red Hat Enterprise Linux 6 | libvncserver | Fixed | RHSA-2014:1826 | 11.11.2014 |
| Red Hat Enterprise Linux 6.5 Extended Update Support | libvncserver | Fixed | RHSA-2015:0113 | 02.02.2015 |
| Red Hat Enterprise Linux 7 | libvncserver | Fixed | RHSA-2014:1826 | 11.11.2014 |
Показывать по
Дополнительная информация
Статус:
6 Medium
CVSS2
Связанные уязвимости
Integer overflow in the MallocFrameBuffer function in vncviewer.c in LibVNCServer 0.9.9 and earlier allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitrary code via an advertisement for a large screen size, which triggers a heap-based buffer overflow.
Integer overflow in the MallocFrameBuffer function in vncviewer.c in LibVNCServer 0.9.9 and earlier allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitrary code via an advertisement for a large screen size, which triggers a heap-based buffer overflow.
Integer overflow in the MallocFrameBuffer function in vncviewer.c in L ...
Integer overflow in the MallocFrameBuffer function in vncviewer.c in LibVNCServer 0.9.9 and earlier allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitrary code via an advertisement for a large screen size, which triggers a heap-based buffer overflow.
Уязвимость функции MallocFrameBuffer кроссплатформенной библиотеки LibVNCServer, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
6 Medium
CVSS2