Configuration in Vino - CVE-2011-1164

 

Configuration in Vino - CVE-2011-1164

Published: March 13, 2013 / Updated: August 11, 2020


Vulnerability identifier: #VU43007
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2011-1164
CWE-ID: CWE-16
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vendor: Gnome Development Team
Affected software:
Vino

Detailed vulnerability description

The vulnerability allows a remote #AU# to read and manipulate data.

Vino before 2.99.4 can connect external networks contrary to the statement in the vino-preferences dialog box, which might make it easier for remote attackers to perform attacks.


How to mitigate CVE-2011-1164

Install update from vendor's website.

Sources