CVE-2017-5581 Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before 1.7.1 allows remote servers to execute arbitrary code via an RRE message with subrectangle outside framebuffer bounda...
CriticalCVSS 9.8
EPSS 4.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before 1.7.1 allows remote servers to execute arbitrary code via an RRE message with subrectangle outside framebuffer boundaries.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/tigervnc(Debian:12) | < 1.7.0+dfsg-3 | 1.7.0+dfsg-3 |
| debian/tigervnc(Debian:13) | < 1.7.0+dfsg-3 | 1.7.0+dfsg-3 |
| debian/tigervnc(Debian:14) | < 1.7.0+dfsg-3 | 1.7.0+dfsg-3 |
| TigerVNC | <= 1.7 | No fix listed |
References
- Debian Security Tracker CVE-2017-5581 vendor-advisory
- RHSA-2017:0630 vendor-advisory
- [oss-security] 20170121 Re: [tigervnc-announce] TigerVNC 1.7.1 mailing-list patch third-party-advisory
- [oss-security] 20170125 Re: [tigervnc-announce] TigerVNC 1.7.1 mailing-list patch third-party-advisory
- 95789 third-party-advisory vdb-entry
- RHSA-2017:2000 vendor-advisory
- github.com patch third-party-advisory
- github.com patch third-party-advisory
- github.com release-notes third-party-advisory
- GLSA-201702-19 vendor-advisory
- bugs.debian.org issue-tracking