Lucene search

K
prionPRIOn knowledge basePRION:CVE-2017-5885
HistoryFeb 28, 2017 - 6:59 p.m.

Integer overflow

2017-02-2818:59:00
PRIOn knowledge base
www.prio-n.com
4

9.7 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.3%

Multiple integer overflows in the (1) vnc_connection_server_message and (2) vnc_color_map_set functions in gtk-vnc before 0.7.0 allow remote servers to cause a denial of service (crash) or possibly execute arbitrary code via vectors involving SetColorMapEntries, which triggers a buffer overflow.

CPENameOperatorVersion
fedoraeq25
gtk-vncle0.6.0