gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers to execute arbitrary code via the src x, y coordinates in a crafted (1) rre, (2) hextile, or (3) copyrect tile.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gtk-vnc | Aug 30, 2017 | Feb 28, 2017 |
| Centos_linux | — | Upgrade gvnc-develUpgrade gtk-vncUpgrade gtk-vnc2-develUpgrade gtk-vnc-pythonUpgrade gtk-vnc2Upgrade gvnc-toolsUpgrade gvncpulse-develUpgrade gtk-vnc-develUpgrade gvncpulseUpgrade gvncUpgrade gtk-vnc-debuginfo | Aug 28, 2019 | Feb 28, 2017 |
| Debian | — | Upgrade gtk-vnc | Mar 31, 2017 | Feb 9, 2017 |
| Freebsd | — | Upgrade gtk-vnc | Feb 12, 2017 | Feb 11, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade gtk-vnc2 | Nov 30, 2017 | Feb 28, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gtk-vnc2 | Nov 30, 2017 | Feb 28, 2017 |
| Oracle Solaris | — | Upgrade library/desktop/gtk-vnc to version 0.7.0-0.175.3.29.0.2.0 on Solaris 11.3 | Feb 22, 2018 | Feb 28, 2017 |
| Oracle_linux | — | Upgrade gtk-vnc2Upgrade gtk-vnc-pythonUpgrade gvncpulse-develUpgrade gvncpulseUpgrade gtk-vnc-develUpgrade gvnc-develUpgrade gtk-vncUpgrade gvncUpgrade gtk-vnc2-develUpgrade gvnc-tools | Aug 8, 2017 | Feb 1, 2017 |
| Redhat_linux | — | Upgrade gvncpulseUpgrade gtk-vncUpgrade gtk-vnc-develUpgrade gvncUpgrade gtk-vnc2Upgrade gvncpulse-develUpgrade gvnc-toolsNo solution existsUpgrade gtk-vnc2-develUpgrade gtk-vnc-pythonUpgrade gvnc-develUpgrade gtk-vnc-debuginfo | Aug 3, 2017 | Feb 9, 2017 |
| Suse | — | Upgrade typelib-1_0-GVnc-1_0Upgrade libgtk-vnc-1_0-0Upgrade gtk-vnc-develUpgrade gtk-vnc-langUpgrade typelib-1_0-GtkVnc-2_0Upgrade libgvncpulse-1_0-0Upgrade python-gtk-vncUpgrade gtk-vnc2-develUpgrade libgvnc-1_0-0Upgrade typelib-1_0-GVncPulse-1_0Upgrade typelib-1_0-GtkVnc-1_0Upgrade libgtk-vnc-2_0-0 | May 20, 2018 | Feb 9, 2017 |
| Ubuntu | — | Upgrade libgtk-vnc-2.0-0Upgrade libgtk-vnc-1.0-0Upgrade libgvnc-1.0-0 | Feb 21, 2017 | Feb 9, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub