Improper input validation in Libvncserver
CVE-2014-6052
The HandleRFBServerMessage function in libvncclient/rfbproto.c in LibVNCServer 0.9.9 and earlier does not check certain malloc return values, which allows remote VNC servers to cause a denial of service (application crash) or possibly execute arbitrary code by specifying a large screen size in a (1) FramebufferUpdate, (2) ResizeFrameBuffer, or (3) PalmVNCReSizeFrameBuffer message.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.068 (93.3th percentile) — read the EPSS interpretation.
Affected products
- Libvncserver
- Oracle Solaris — versions 11.3
- Canonical Ubuntu_linux — versions 12.04, 14.04
- Debian Debian_linux — versions 7.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (US Government Resource, Third Party Advisory, x_refsource_MISC)
- cve@mitre.org (Permissions Required, x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- cve@mitre.org (vendor-advisory, x_refsource_SUSE)
- cve@mitre.org (Permissions Required, x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_CONFIRM, Exploit, Patch, Issue Tracking)
- cve@mitre.org (mailing-list, x_refsource_MLIST, Mailing List, Third Party Advisory)
- cve@mitre.org (mailing-list, x_refsource_MLIST, Mailing List, Third Party Advisory)
- cve@mitre.org (x_refsource_UBUNTU, vendor-advisory, Third Party Advisory)
- cve@mitre.org (vendor-advisory, x_refsource_GENTOO)
- cve@mitre.org (vdb-entry, x_refsource_BID)