Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before 1.7.1 allows remote servers to execute arbitrary code via an RRE message with subrectangle outside framebuffer boundaries.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade tigervnc | Sep 1, 2017 | Feb 28, 2017 |
| Centos_linux | — | Upgrade tigervnc-server-moduleUpgrade tigervnc-iconsUpgrade tigervnc-server-minimalUpgrade fltk-fluidUpgrade fltk-develUpgrade tigervnc-server-appletUpgrade tigervncUpgrade fltkUpgrade tigervnc-debuginfoUpgrade tigervnc-serverUpgrade fltk-staticUpgrade tigervnc-licenseUpgrade fltk-debuginfo | Aug 28, 2019 | Feb 28, 2017 |
| Debian | — | Upgrade tigervnc | Jul 30, 2024 | Feb 28, 2017 |
| Gentoo Linux | — | Upgrade net-misc/tigervnc. | Oct 30, 2017 | Feb 28, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade tigervnc-licenseUpgrade tigervncUpgrade tigervnc-serverUpgrade tigervnc-iconsUpgrade tigervnc-server-minimal | Nov 30, 2017 | Feb 28, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade tigervnc-server-minimalUpgrade tigervncUpgrade tigervnc-serverUpgrade tigervnc-licenseUpgrade tigervnc-icons | Nov 30, 2017 | Feb 28, 2017 |
| Oracle Solaris | — | Upgrade x11/library/toolkit/fltk to version 1.3.4-0.175.3.31.0.4.1547 on Solaris 11.3Upgrade x11/server/xvnc to version 1.7.1-0.175.3.31.0.4.1547 on Solaris 11.3Upgrade desktop/remote-desktop/tigervnc to version 1.7.1-0.175.3.31.0.4.1547 on Solaris 11.3 | Apr 18, 2018 | Feb 28, 2017 |
| Oracle_linux | — | Upgrade tigervnc-server-appletUpgrade fltkUpgrade tigervnc-serverUpgrade tigervncUpgrade fltk-staticUpgrade tigervnc-licenseUpgrade tigervnc-server-moduleUpgrade tigervnc-server-minimalUpgrade fltk-fluidUpgrade tigervnc-iconsUpgrade fltk-devel | Mar 28, 2017 | Jan 13, 2017 |
| Redhat_linux | — | Upgrade tigervnc-server-moduleUpgrade fltk-fluidUpgrade fltk-develUpgrade tigervnc-server-minimalUpgrade tigervnc-iconsUpgrade fltk-staticUpgrade fltkUpgrade fltk-debuginfoUpgrade tigervncUpgrade tigervnc-debuginfoUpgrade tigervnc-licenseUpgrade tigervnc-serverUpgrade tigervnc-server-applet | Mar 21, 2017 | Feb 28, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub