Arbitrary Code Execution

TigerVNC is vulnerable to arbitrary code execution attacks. A remote user can send a specially crafted RRE message with subrectangle outside framebuffer boundaries via the ModifiablePixelBuffer::fillRect function to trigger a buffer overflow and execute arbitrary code on the target system...