Lucene search
+L

1 matches found

OSV
OSV
added 2017/02/20 1:00 p.m.14 views

MGASA-2017-0057 Updated gtk-vnc packages fix security vulnerability

It was found that gtk-vnc code does not properly check boundaries of subrectangle-containing tiles. A malicious server can use this to overwrite parts of the client memory CVE-2017-5884. In addition, the vncconnectionservermessage and vnccolormapset functions do not check for integer overflow...

9.8CVSS8.9AI score0.04985EPSS
SaveExploits2References5
Rows per page
Query Builder