CVE-2019-5884

The CVE-2019-5884 entry concerns information disclosure in the elFinder project. It affects elFinder versions up to and including 2.1.44 (before 2.1.45), where PHP’s curl extension, combined with unsafe PHP configurations (safe_mode or open_basedir not set), can leak information. Root cause is ti...

CVE-2018-5884

Improper Access Control in Multimedia in Snapdragon Mobile and Snapdragon Wear, Non-standard applications without permission may acquire permission of Qualcomm-specific proprietary intents...

CVE-2018-5884

The CVE-2018-5884 entry concerns Snapdragon Multimedia on Qualcomm-based devices (Snapdragon Mobile and Snapdragon Wear). It describes an improper access-control vulnerability where non-standard applications, without permission, may acquire permission to Qualcomm-specific proprietary intents with...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Virtualization Engine TS7700 - January 2014

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 7, IBM SDK Java Technology Edition, Version 6, and IBM SDK Java 2 Technology Edition, Version 5 that are used by IBM Virtualization Engine TS7700. These issues were disclosed as part of the IBM Java SDK updat...

EulerOS 2.0 SP2 : gtk-vnc (EulerOS-SA-2017-1182)

According to the versions of the gtk-vnc package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that gtk-vnc lacked proper bounds checking while processing messages using RRE, hextile, or copyrect encodings. A remote malicious...

EulerOS 2.0 SP1 : gtk-vnc (EulerOS-SA-2017-1181)

According to the versions of the gtk-vnc package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that gtk-vnc lacked proper bounds checking while processing messages using RRE, hextile, or copyrect encodings. A remote malicious...

CentOS 7 : gtk-vnc (CESA-2017:2258)

An update for gtk-vnc is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

gtk, gvnc, gvncpulse security update

CentOS Errata and Security Advisory CESA-2017:2258 An update for gtk-vnc is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Scientific Linux Security Update : gtk-vnc on SL7.x x86_64 (20170801)

The following packages have been upgraded to a later upstream version: gtk-vnc 0.7.0. Security Fixes : - It was found that gtk-vnc lacked proper bounds checking while processing messages using RRE, hextile, or copyrect encodings. A remote malicious VNC server could use this flaw to crash VNC...

Oracle Linux 7 : gtk-vnc (ELSA-2017-2258)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2258 advisory. - CVE-2017-5884 - fix bounds checking for RRE, hextile and copyrect encodings rhbz 1425367 Tenable has extracted the preceding description block direct...

gtk-vnc security, bug fix, and enhancement update

0.7.0-2 - Fix reserved data size rhbz 1416783 - Fix inverted args in tests rhbz 1416783 - Avoid sign extension problems rhbz 1416783 - Fix crash with opening via GSocketAddress rhbz 1416783 - Fix crash & error reporting during connection timeout rhbz 1441120 - Fix incompatibility with libvncserve...

RHEL 7 : gtk-vnc (RHSA-2017:2258)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:2258 advisory. The gtk-vnc packages provide a VNC viewer widget for GTK. The gtk-vnc widget is built by using co- routines, which allows the widget to be...

Fedora 25 : mingw-gtk-vnc (2017-c3739273e5)

Security fix for CVE-2017-5884, CVE-2017-5885 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 24 : mingw-gtk-vnc (2017-404f1a29fc)

Security fix for CVE-2017-5884, CVE-2017-5885 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 24 : gtk-vnc (2017-a9e6a5c249)

Security fix for CVE-2017-5884, CVE-2017-5885 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

DEBIAN-CVE-2017-5884

gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers to execute arbitrary code via the src x, y coordinates in a crafted 1 rre, 2 hextile, or 3 copyrect tile...

CVE-2017-5884

gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers to execute arbitrary code via the src x, y coordinates in a crafted 1 rre, 2 hextile, or 3 copyrect tile...

CVE-2017-5884

gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers to execute arbitrary code via the src x, y coordinates in a crafted 1 rre, 2 hextile, or 3 copyrect tile...

CVE-2017-5884

gtk-vnc up to version 0.7.0 is affected by CVE-2017-5884 due to improper bounds checking of subrectangle-containing tiles for RRE, hextile, and copyrect encodings, enabling remote servers to potentially overwrite memory or execute code. Multiple distro advisories (e.g., CentOS/RHSA-2017:2258, Mag...

CVE-2017-5884

gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers to execute arbitrary code via the src x, y coordinates in a crafted 1 rre, 2 hextile, or 3 copyrect tile...