GCVE-110-MAGEIA-2015-133

Advisory Published

Vulnetix · Advisory published April 4, 2015

Updated novnc package fixes security vulnerability: noVNC before 0.5.1 allows an attacker to steal insecurely set session token cookies, hijacking active or inactive VNC sessions (CVE-2013-7436).

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	novnc	0 (affected), 0.4-9.2.mga4 (unaffected)	—

References

Updated novnc packages fix CVE-2013-7436

advisory

Updated novnc packages fix CVE-2013-7436

issue

Updated novnc packages fix CVE-2013-7436

issue

Browse GCVE Records

20,165 records in the GCVE database · Updated October 21, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON