CVE-2009-3616

Multiple use-after-free vulnerabilities in vnc.c in the VNC server in QEMU 0.10.6 and earlier might allow guest OS users to execute arbitrary code on the host OS by establishing a connection from a VNC client and then 1 disconnecting during data transfer, 2 sending a message using incorrect integ...

CVE-2009-3616

Multiple use-after-free vulnerabilities in vnc.c in the VNC server in QEMU 0.10.6 and earlier might allow guest OS users to execute arbitrary code on the host OS by establishing a connection from a VNC client and then 1 disconnecting during data transfer, 2 sending a message using incorrect integ...

CVE-2009-3616

CVE-2009-3616 covers multiple use-after-free vulnerabilities in the VNC server (vnc.c) of QEMU/KVM before 0.10.6. The VNC server could allow a guest OS user to execute arbitrary code on the host by (1) disconnecting during data transfer, (2) sending data with incorrect integer types, or (3) using...

CVE-2009-3616

Multiple use-after-free vulnerabilities in vnc.c in the VNC server in QEMU 0.10.6 and earlier might allow guest OS users to execute arbitrary code on the host OS by establishing a connection from a VNC client and then 1 disconnecting during data transfer, 2 sending a message using incorrect integ...

PT-2009-5891 · Qemu · Qemu

Name of the Vulnerable Software and Affected Versions: QEMU versions 0.10.6 and earlier Description: The issue is related to multiple use-after-free vulnerabilities in the VNC server component of QEMU. These vulnerabilities might allow guest OS users to execute arbitrary code on the host OS. This...

Windows x64 VNC Server (Reflective Injection), Windows x64 Reverse TCP Stager

Inject a VNC Dll via a reflective loader Windows x64 staged. Connect back to the attacker Windows x64 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 449 include Msf::Payload::Stag...

Windows x64 VNC Server (Reflective Injection), Windows x64 Bind TCP Stager

Inject a VNC Dll via a reflective loader Windows x64 staged. Listen for a connection Windows x64 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 483 include Msf::Payload::Stager...

openSUSE Security Update : kvm (kvm-412)

Rogue VNC clients could make the built in VNC server of kvm run into an infinite loop CVE-2008-2382 An off-by-one bug limited the length of VNC passwords to seven instead of eight CVE-2008-5714 Virtualized guests could potentially execute code on the host by triggering a buffer overflow in the...

openSUSE Security Update : qemu (qemu-691)

qemu update to version 0.10.1 fixes the following security issues : CVE-2008-0928: problems with range checks of block devices CVE-2008-1945: problems with removable media handling CVE-2008-2382: vnc server DoS CVE-2008-4539: fix a heap overflow in the cirrus VGA implementation CVE-2008-5714: off...

Mandriva Linux Security Advisory : kvm (MDVSA-2009:009)

Security vulnerabilities have been discovered and corrected in VNC server of kvm version 79 and earlier, which could lead to denial-of-service attacks CVE-2008-2382, and make it easier for remote crackers to guess the VNC password CVE-2008-5714. The updated packages have been patched to prevent...

Mandriva Linux Security Advisory : x11-server (MDVSA-2008:116)

An input validation flaw was found in X.org's Security and Record extensions. A malicious authorized client could exploit the issue to cause a denial of service crash or possibly execute arbitrary code with root privileges on the X.org server CVE-2008-1377. An input validation flaw was found in...

Mandriva Linux Security Advisory : qemu (MDVSA-2009:008)

Security vulnerabilities have been discovered and corrected in VNC server of qemu version 0.9.1 and earlier, which could lead to denial-of-service attacks CVE-2008-2382, and make it easier for remote crackers to guess the VNC password CVE-2008-5714. The updated packages have been patched to preve...

Mandriva Update for x11-server MDVSA-2008:116 (x11-server)

Check for the Version of x11-server OpenVAS Vulnerability Test Mandriva Update for x11-server MDVSA-2008:116 x11-server Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Mandriva Update for vinagre MDVSA-2008:240 (vinagre)

Check for the Version of vinagre OpenVAS Vulnerability Test Mandriva Update for vinagre MDVSA-2008:240 vinagre Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for vinagre MDVSA-2008:240 (vinagre)

Check for the Version of vinagre OpenVAS Vulnerability Test Mandriva Update for vinagre MDVSA-2008:240 vinagre Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

openSUSE 10 Security Update : qemu (qemu-6123)

qemu update to version 0.10.1 fixes the following security issues : CVE-2008-0928: problems with range checks of block devices CVE-2008-1945: problems with removable media handling CVE-2008-2382: vnc server DoS CVE-2008-4539: fix a heap overflow in the cirrus VGA implementation CVE-2008-5714: off...

Ubuntu Update for vinagre vulnerability USN-689-1

Ubuntu Update for Linux kernel vulnerabilities USN-689-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6891.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for vinagre vulnerability USN-689-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

UltraVNC ClientConnection integer overflow

Added: 02/20/2009 CVE: CVE-2009-0388 BID: 33568 Background UltraVNC is free software for remote desktop access. Problem Multiple integer overflow vulnerabilities in the ClientConnection class allow command execution when a user connects to a VNC server which sends a message with a large length...

UltraVNC ClientConnection integer overflow

Added: 02/20/2009 CVE: CVE-2009-0388 BID: 33568 Background UltraVNC is free software for remote desktop access. Problem Multiple integer overflow vulnerabilities in the ClientConnection class allow command execution when a user connects to a VNC server which sends a message with a large length...

CentOS Security Advisory CESA-2009:0261 (vnc)

The remote host is missing updates to vnc announced in advisory CESA-2009:0261. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...