CVE-2011-0904

CVE-2011-0904 affects Vino’s vino-server, specifically the rfbSendFramebufferUpdate path in server/libvncserver/rfbserver.c. When raw encoding is used, remote authenticated users may trigger an out-of-bounds memory access by sending a large X or Y position in a framebuffer update, causing a daemo...

CVE-2013-5745

CVE-2013-5745 affects GNOME Vino 2.26.1, 2.32.1, 3.7.3, and earlier, and 3.8 when encryption is disabled. The issue is in vino_server_client_data_pending in vino-server.c, where client data isn’t cleared when an authentication error closes the connection, enabling a remote attacker to trigger a d...

CVE-2011-0905

The CVE-2011-0905 issue affects the Vino VNC server (vino-server) used with GNOME. The flaw resides in rfbSendFramebufferUpdate (server/libvncserver/rfbserver.c): when using tight encoding, remote authenticated users can trigger an out-of-bounds read in a crafted framebuffer update request, poten...

CVE-2011-1164

CVE-2011-1164 affects the GNOME Vino VNC server (vino-server). The issue exists in Vino before 2.99.4 where a remote attacker could connect to external networks contrary to the vino-preferences dialog, potentially enabling attacks. Affected code paths involve the rfb-handling paths that allow ext...

CVE-2012-4429

CVE-2012-4429 affects Vino (GNOME VNC server) versions 2.28, 2.32, 3.4.2 and earlier, allowing remote attackers to read clipboard activity by listening on TCP port 5900. The connected Nessus/OpenVAS entries corroborate affected packages across multiple OS families (MiracleLinux, Ubuntu, Oracle Li...

CVE-2011-1165

CVE-2011-1165 concerns the Vino VNC server for GNOME. The issue: when the user enables “Configure network to automatically accept connections,” Vino could open ports in UPnP routers without proper documentation, potentially aiding remote attackers in further compromise. The connected advisories i...