CVE-2007-0756

CVE-2007-0756 affects Chicken of the VNC (cotv) 2.0. The vulnerability is triggered by a large computer-name size value in a ServerInit packet, causing a failed malloc and a NULL dereference, leading to a remote denial of service (application crash). The root cause is not elaborated beyond this, ...

CVE-2007-0756: Undefined Security Weakness

Chicken of the VNC cotv 2.0 allows remote attackers to cause a denial of service application crash via a large computer-name size value in a ServerInit packet, which triggers a failed malloc and a resulting NULL dereference...

cotv2-dos.txt

hi, i wish to inform you that cotv 2.0 a vnc client for maxosx available at http://sourceforge.net/projects/cotvnc/ is prone to a remotely exploitable denial of service vulnerability because it fails to validate the content of ServerInit packets. A ServerInit packet contains the server's computer...