DSA-2238-1 vino - several

Bulletin has no description...

[SECURITY] Fedora 14 Update: vino-2.32.2-1.fc14

Vino is a VNC server for GNOME. It allows remote users to connect to a running GNOME session using VNC...

CVE-2011-0904

CVE-2011-0904 affects Vino’s vino-server, specifically the rfbSendFramebufferUpdate path in server/libvncserver/rfbserver.c. When raw encoding is used, remote authenticated users may trigger an out-of-bounds memory access by sending a large X or Y position in a framebuffer update, causing a daemo...

Vino VNC server DoS

Crash on client request processing...

USN-1128-1: Vino vulnerabilities

Kevin Chen discovered that Vino incorrectly handled certain client framebuffer requests. A remote attacker could use this flaw to cause Vino to crash, leading to a denial of service...

BackTrack 5 will also be for Motorola Xoom !

In the past few days offensive-security have been toying with some Motorola hardware, and have managed to get a basic build of BackTrack 5 + toolchain on a Motorola Xoom. The possibilities look exciting as offensive-security are slowly building several experimental arm packages. offensive-securit...

vnc-info NSE Script

Queries a VNC server for its protocol version and supported security types. Example Usage nmap -sV -sC Script Output PORT STATE SERVICE 5900/tcp open vnc | vnc-info: | Protocol version: 3.889 | Security types: | Mac OS X security type 30 | Mac OS X security type 35 Requires shortport stdnse strin...

SmartCode ServerX VNC Server ActiveX 1.1.5.0 - scvncsrvx.dll Denial of Service

SmartCode ServerX VNC Server ActiveX 1.1.5.0 - scvncsrvx.dll Denial of Service Title: SmartCode ServerX VNC Server ActiveX 1.1.5.0 scvncsrvx.dll DoS Exploit Vendor: SmartCode Solutions Product Web Page: htt://www.s-code.com Version Tested: 1.1.5.0 Summary: SmartCode ServerX VNC Server control is ...

SmartCode ServerX VNC Server ActiveX 1.1.5.0 (scvncsrvx.dll) DoS Exploit

Summary SmartCode ServerX VNC Server control is a VNC server implemented as an ActiveX component, which makes it extremely easy for you to integrate VNC support into your Web or desktop applications. In the simplest scenario, you would add the ServerX ActiveX component to your project, place the...

SmartCode ServerX VNC Server ActiveX 1.1.5.0 (scvncsrvx.dll) DoS

Exploit for windows platform in category dos / poc ================================================================ SmartCode ServerX VNC Server ActiveX 1.1.5.0 scvncsrvx.dll DoS ================================================================ Vendor: SmartCode Solutions Product Web Page:...

SmartCode ServerX VNC Server ActiveX 1.1.5.0 - 'scvncsrvx.dll' Denial of Service

Title: SmartCode ServerX VNC Server ActiveX 1.1.5.0 scvncsrvx.dll DoS Exploit Vendor: SmartCode Solutions Product Web Page: htt://www.s-code.com Version Tested: 1.1.5.0 Summary: SmartCode ServerX VNC Server control is a VNC server implemented as an ActiveX component, which makes it extremely easy...

RealVNC VNC Server ClientCutText Message Memory Corruption

A memory corruption vulnerability has been reported in RealVNC VNC Server. The vulnerability is due to insufficient boundary checks by RealVNC when handling certain messages sent from RealVNC clients. A remote attackerscould exploit this issue by sending a crafted VNC command ot a target server...

RealVNC VNC Server Free Edition 4.1.3 Denial Of Service

================================================================================================== $$$$$$$\ $$\ $$\ $$\ $$$$$$\ $$ $$\ | $$ | $$ | $$ $$\ $$ | $$ |$$\ $$$$$$$\ $$$$$$\ $$$$$$$\ $$$$$$\ $$$$$$$\ $$$$$$\ $$ | $$ / $$ | $$$$$$$\ |$$ |$$ |$$ $$\ $$ $$\ $$ $$\ $$ $$\ $$ $$\ $$ |...

RealVNC VNC Server Free Edition 4.1.3 Denial of Service

Exploit for windows platform in category dos / poc ======================================================= RealVNC VNC Server Free Edition 4.1.3 Denial of Service =======================================================...

Qemu and KVM VNC server remote DoS

Qemu and KVM VNC server remote DoS 1. Advisory Information Title: Qemu and KVM VNC server remote DoS Advisory ID: CORE-2008-1210 Advisory URL: Date published: 2009-12-22 Date of last update: 2008-12-19 Vendors contacted: Qemu and KVM teams Release mode: Coordinated release 2. Vulnerability...

openSUSE Security Update : qemu (qemu-1537)

The VNC server of qemu was vulnerable to use-after-free bugs, that allowed the execution of code on the host system initiated from the guest system. This can be used to escape from the guest machine to the host machine. CVE-2009-3616: CVSS v2 Base Score: 8.5 %NASLMINLEVEL 70300 C Tenable Network...

openSUSE Security Update : qemu (qemu-1537)

The VNC server of qemu was vulnerable to use-after-free bugs, that allowed the execution of code on the host system initiated from the guest system. This can be used to escape from the guest machine to the host machine. CVE-2009-3616: CVSS v2 Base Score: 8.5 %NASLMINLEVEL 70300 C Tenable Network...

CVE-2009-3616

Multiple use-after-free vulnerabilities in vnc.c in the VNC server in QEMU 0.10.6 and earlier might allow guest OS users to execute arbitrary code on the host OS by establishing a connection from a VNC client and then 1 disconnecting during data transfer, 2 sending a message using incorrect integ...

Double free

Multiple use-after-free vulnerabilities in vnc.c in the VNC server in QEMU 0.10.6 and earlier might allow guest OS users to execute arbitrary code on the host OS by establishing a connection from a VNC client and then 1 disconnecting during data transfer, 2 sending a message using incorrect integ...

CVE-2009-3616

Multiple use-after-free vulnerabilities in vnc.c in the VNC server in QEMU 0.10.6 and earlier might allow guest OS users to execute arbitrary code on the host OS by establishing a connection from a VNC client and then 1 disconnecting during data transfer, 2 sending a message using incorrect integ...