Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before 1.7.1 allows remote servers to execute arbitrary code via an RRE message with subrectangle outside framebuffer boundaries.
CVSS Details
- CVSS 3.0 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade tigervnc | Sep 1, 2017 | Feb 28, 2017 |
| Centos_linux | — | Upgrade tigervncUpgrade tigervnc-debuginfoUpgrade fltkUpgrade tigervnc-serverUpgrade tigervnc-licenseUpgrade fltk-staticUpgrade fltk-debuginfoUpgrade tigervnc-server-appletUpgrade fltk-fluidUpgrade tigervnc-server-moduleUpgrade tigervnc-server-minimalUpgrade fltk-develUpgrade tigervnc-icons | Aug 28, 2019 | Feb 28, 2017 |
| Debian | — | Upgrade tigervnc | Jul 30, 2024 | Feb 28, 2017 |
| Gentoo Linux | — | Upgrade net-misc/tigervnc. | Oct 30, 2017 | Feb 28, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade tigervnc-serverUpgrade tigervnc-iconsUpgrade tigervnc-server-minimalUpgrade tigervncUpgrade tigervnc-license | Nov 30, 2017 | Feb 28, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade tigervnc-server-minimalUpgrade tigervncUpgrade tigervnc-serverUpgrade tigervnc-iconsUpgrade tigervnc-license | Nov 30, 2017 | Feb 28, 2017 |
| Oracle Solaris | — | Upgrade x11/library/toolkit/fltk to version 1.3.4-0.175.3.31.0.4.1547 on Solaris 11.3Upgrade x11/server/xvnc to version 1.7.1-0.175.3.31.0.4.1547 on Solaris 11.3Upgrade desktop/remote-desktop/tigervnc to version 1.7.1-0.175.3.31.0.4.1547 on Solaris 11.3 | Apr 18, 2018 | Feb 28, 2017 |
| Oracle_linux | — | Upgrade tigervncUpgrade tigervnc-serverUpgrade fltkUpgrade tigervnc-server-appletUpgrade fltk-staticUpgrade tigervnc-licenseUpgrade tigervnc-iconsUpgrade tigervnc-server-moduleUpgrade fltk-develUpgrade fltk-fluidUpgrade tigervnc-server-minimal | Mar 28, 2017 | Jan 13, 2017 |
| Redhat_linux | — | Upgrade fltk-debuginfoUpgrade tigervnc-server-appletUpgrade tigervnc-serverUpgrade fltkUpgrade tigervnc-debuginfoUpgrade tigervncUpgrade tigervnc-licenseUpgrade fltk-staticUpgrade fltk-fluidUpgrade tigervnc-server-moduleUpgrade tigervnc-server-minimalUpgrade fltk-develUpgrade tigervnc-icons | Mar 21, 2017 | Feb 28, 2017 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub