Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before 1.7.1 allows remote servers to execute arbitrary code via an RRE message with subrectangle outside framebuffer boundaries.
CVSS Details
- CVSS 3.0 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | amazon-linux-upgrade-tigervnc | Sep 1, 2017 | Feb 28, 2017 |
| Centos_linux | — | centos-upgrade-fltkcentos-upgrade-fltk-debuginfocentos-upgrade-fltk-develcentos-upgrade-fltk-fluidcentos-upgrade-fltk-staticcentos-upgrade-tigervnccentos-upgrade-tigervnc-debuginfocentos-upgrade-tigervnc-iconscentos-upgrade-tigervnc-licensecentos-upgrade-tigervnc-servercentos-upgrade-tigervnc-server-appletcentos-upgrade-tigervnc-server-minimalcentos-upgrade-tigervnc-server-module | Aug 28, 2019 | Feb 28, 2017 |
| Debian | debian-upgrade-tigervnc | Jul 30, 2024 | Feb 28, 2017 | |
| Gentoo Linux | gentoo-linux-upgrade-net-misc-tigervnc | Oct 30, 2017 | Feb 28, 2017 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-tigervnchuawei-euleros-2_0_sp1-upgrade-tigervnc-iconshuawei-euleros-2_0_sp1-upgrade-tigervnc-licensehuawei-euleros-2_0_sp1-upgrade-tigervnc-serverhuawei-euleros-2_0_sp1-upgrade-tigervnc-server-minimal | Nov 30, 2017 | Feb 28, 2017 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-tigervnchuawei-euleros-2_0_sp2-upgrade-tigervnc-iconshuawei-euleros-2_0_sp2-upgrade-tigervnc-licensehuawei-euleros-2_0_sp2-upgrade-tigervnc-serverhuawei-euleros-2_0_sp2-upgrade-tigervnc-server-minimal | Nov 30, 2017 | Feb 28, 2017 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-desktop-remote-desktop-tigervnc-1-7-1-0-175-3-31-0-4-1547oracle-solaris-11-3-upgrade-x11-library-toolkit-fltk-1-3-4-0-175-3-31-0-4-1547oracle-solaris-11-3-upgrade-x11-server-xvnc-1-7-1-0-175-3-31-0-4-1547 | Apr 18, 2018 | Feb 28, 2017 | |
| Oracle_linux | — | oracle-linux-upgrade-fltkoracle-linux-upgrade-fltk-develoracle-linux-upgrade-fltk-fluidoracle-linux-upgrade-fltk-staticoracle-linux-upgrade-tigervncoracle-linux-upgrade-tigervnc-iconsoracle-linux-upgrade-tigervnc-licenseoracle-linux-upgrade-tigervnc-serveroracle-linux-upgrade-tigervnc-server-appletoracle-linux-upgrade-tigervnc-server-minimaloracle-linux-upgrade-tigervnc-server-module | Mar 28, 2017 | Jan 13, 2017 |
| Redhat_linux | — | redhat-upgrade-fltkredhat-upgrade-fltk-debuginforedhat-upgrade-fltk-develredhat-upgrade-fltk-fluidredhat-upgrade-fltk-staticredhat-upgrade-tigervncredhat-upgrade-tigervnc-debuginforedhat-upgrade-tigervnc-iconsredhat-upgrade-tigervnc-licenseredhat-upgrade-tigervnc-serverredhat-upgrade-tigervnc-server-appletredhat-upgrade-tigervnc-server-minimalredhat-upgrade-tigervnc-server-module | Mar 21, 2017 | Feb 28, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub