CVE-2014-6055 PUBLISHED

Multiple stack-based buffer overflows in the File Transfer feature in rfbserver.c in LibVNCServer 0.9.9 and earlier allow remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a (1) long file or (2) directory name or the (3) FileTime attribute in a rfbFileTransferOffer message.

EPSS 11.16% · 93.4th percentile

Risk Scores

EPSS Score
11.16%
93.4th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSlibvncserver0, 0.9.9+dfsg-1, 0.9.9+dfsg-1ubuntu1
Ubuntu:14.04:LTSkrfb4:4.11.95-0ubuntu1, 4:4.11.97-0ubuntu1, 4:4.12.0-0ubuntu1
Ubuntu:16.04:LTSitalc0, 1:2.0.2+dfsg1-3, 1:2.0.2+dfsg1-4

Timeline

References

Open in Interactive Console →