Vulnetix
Try Vulnetix Request Demo
CVE-2014-6051 PUBLISHED

Integer overflow in the MallocFrameBuffer function in vncviewer.c in LibVNCServer 0.9.9 and earlier allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitrary code via an advertisement for a large screen size, which triggers a heap-based buffer overflow.

EPSS 6.61% · 91.1th percentile

Risk Scores

EPSS Score
6.61%
91.1th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSitalc0, 1:2.0.2+dfsg1-3, 1:2.0.2+dfsg1-4
Ubuntu:14.04:LTSlibvncserver0, 0.9.9+dfsg-1, 0.9.9+dfsg-1ubuntu1

Timeline

References

Open in Interactive Console →