Main Vulnerability Database Vulnerabilities #VU32991

Buffer overflow in gtk-vnc - CVE-2017-1000044

Published: August 3, 2020

Vulnerability identifier: #VU32991

CSH Severity: High

CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber

CVE-ID: CVE-2017-1000044

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vendor: Gnome Development Team

Affected software:
gtk-vnc

Detailed vulnerability description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

gtk-vnc 0.4.2 and older doesn't check framebuffer boundaries correctly when updating framebuffer which may lead to memory corruption when rendering.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Install updates from vendor's website.