Vulnetix
Try Vulnetix Request Demo
CVE-2014-6052 PUBLISHED

The HandleRFBServerMessage function in libvncclient/rfbproto.c in LibVNCServer 0.9.9 and earlier does not check certain malloc return values, which allows remote VNC servers to cause a denial of service (application crash) or possibly execute arbitrary code by specifying a large screen size in a (1) FramebufferUpdate, (2) ResizeFrameBuffer, or (3) PalmVNCReSizeFrameBuffer message.

EPSS 5.24% · 89.9th percentile

Risk Scores

EPSS Score
5.24%
89.9th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSlibvncserver0, 0.9.9+dfsg-1, 0.9.9+dfsg-1ubuntu1
Ubuntu:16.04:LTSitalc0, 1:2.0.2+dfsg1-3, 1:2.0.2+dfsg1-4

Timeline

References

Open in Interactive Console →