2167 matches found
CVE-2017-5884
gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers to execute arbitrary code via the src x, y coordinates in a crafted 1 rre, 2 hextile, or 3 copyrect tile...
CVE-2017-5884
gtk-vnc up to version 0.7.0 is affected by CVE-2017-5884 due to improper bounds checking of subrectangle-containing tiles for RRE, hextile, and copyrect encodings, enabling remote servers to potentially overwrite memory or execute code. Multiple distro advisories (e.g., CentOS/RHSA-2017:2258, Mag...
CVE-2017-5885
Multiple integer overflows in the 1 vncconnectionservermessage and 2 vnccolormapset functions in gtk-vnc before 0.7.0 allow remote servers to cause a denial of service crash or possibly execute arbitrary code via vectors involving SetColorMapEntries, which triggers a buffer overflow...
CVE-2017-5884
gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers to execute arbitrary code via the src x, y coordinates in a crafted 1 rre, 2 hextile, or 3 copyrect tile...
CVE-2017-5884
gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers to execute arbitrary code via the src x, y coordinates in a crafted 1 rre, 2 hextile, or 3 copyrect tile...
CVE-2017-5885
Multiple integer overflows in the 1 vncconnectionservermessage and 2 vnccolormapset functions in gtk-vnc before 0.7.0 allow remote servers to cause a denial of service crash or possibly execute arbitrary code via vectors involving SetColorMapEntries, which triggers a buffer overflow...
CVE-2017-5885
The CVE-2017-5885 issue affects gtk-vnc prior to 0.7.0, caused by an integer overflow in vnc_connection_server_message and vnc_color_map_set that could enable a remote VNC server to crash the client or potentially execute arbitrary code via SetColorMapEntries. Public advisories (CentOS, Fedora, D...
CVE-2017-2633
An out-of-bounds memory access issue was found in Quick Emulator QEMU in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the 'vncrefreshserversurface'. A user inside a guest could use this flaw to crash the QEMU process...
UBUNTU-CVE-2017-2633
An out-of-bounds memory access issue was found in Quick Emulator QEMU before 1.7.2 in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the 'vncrefreshserversurface'. A user inside a guest could use this flaw to crash the QEMU process...
CVE-2017-2633
An out-of-bounds memory access issue was found in Quick Emulator QEMU before 1.7.2 in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the 'vncrefreshserversurface'. A user inside a guest could use this flaw to crash the QEMU process...
Ubuntu: Security Advisory (USN-3203-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 14.04 LTS : gtk-vnc vulnerabilities (USN-3203-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3203-1 advisory. It was discovered that gtk-vnc incorrectly validated certain data. A malicious server could use this issue to cause gtk-vnc to crash, resulting in a deni...
Debian DLA-831-1 : gtk-vnc security update
Josef Gajdusek discovered two vulnerabilities in gtk-vnc, a VNC viewer widget for GTK : CVE-2017-5884 Fix bounds checking for RRE, hextile & copyrec encodings. This bug allowed a remote server to cause a denial of service by buffer overflow via a carefully crafted message containing subrectangles...
GLSA-201702-24 : LibVNCServer/LibVNCClient: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201702-24 LibVNCServer/LibVNCClient: Multiple vulnerabilities Multiple vulnerabilities have been discovered in LibVNCServer and LibVNCClient. Please review the CVE identifiers referenced below for details. Impact : A remote attack...
[SECURITY] [DLA 831-1] gtk-vnc security update
Package : gtk-vnc Version : 0.5.0-3.1+deb7u1 CVE ID : CVE-2017-5884 CVE-2017-5885 Debian Bug : 854450 Josef Gajdusek discovered two vulnerabilities in gtk-vnc, a VNC viewer widget for GTK: CVE-2017-5884 Fix bounds checking for RRE, hextile & copyrec encodings. This bug allowed a remote server to...
USN-3203-1: gtk-vnc vulnerabilities
It was discovered that gtk-vnc incorrectly validated certain data. A malicious server could use this issue to cause gtk-vnc to crash, resulting in a denial of service, or possibly execute arbitrary code...
MGASA-2017-0057 Updated gtk-vnc packages fix security vulnerability
It was found that gtk-vnc code does not properly check boundaries of subrectangle-containing tiles. A malicious server can use this to overwrite parts of the client memory CVE-2017-5884. In addition, the vncconnectionservermessage and vnccolormapset functions do not check for integer overflow...
Updated gtk-vnc packages fix security vulnerability
It was found that gtk-vnc code does not properly check boundaries of subrectangle-containing tiles. A malicious server can use this to overwrite parts of the client memory CVE-2017-5884. In addition, the vncconnectionservermessage and vnccolormapset functions do not check for integer overflow...
TigerVNC: Buffer overflow
Background TigerVNC is a high-performance VNC server/client. Description A buffer overflow vulnerability in ModifiablePixelBuffer::fillRect in vncviewer was found. Impact A remote attacker, utilizing a malicious VNC server, could execute arbitrary code with the privileges of the user running the...