CVE-2014-6052

概要

参考情報

• lists.opensuse.org/opensuse-updates/2015-12/msg00022.html
• seclists.org/oss-sec/2014/q3/639 · Mailing List
• secunia.com/advisories/61506 · Permissions Required
• secunia.com/advisories/61682 · Permissions Required
• ubuntu.com/usn/usn-2365-1 · Third Party Advisory
• debian.org/security/2014/dsa-3081 · Third Party Advisory
• ocert.org/advisories/ocert-2014-007.html · Third Party Advisory
• openwall.com/lists/oss-security/2014/09/25/11 · Mailing List
• oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html · Third Party Advisory
• securityfocus.com/bid/70091
• newsoft/libvncserver commit 85a778c · Exploit
• lists.debian.org/debian-lts-announce/2019/10/msg00042.html

libvncserver のその他の脆弱性

• CVE-2014-6053中 5.0The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier does not properly handle attempts t…
• CVE-2014-6054中 4.3The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier allows remote attackers to cause a …
• CVE-2014-6055中 6.5Multiple stack-based buffer overflows in the File Transfer feature in rfbserver.c in LibVNCServer 0.9.9 and earlier allow remote authenticat…
• CVE-2014-6051高 7.5Integer overflow in the MallocFrameBuffer function in vncviewer.c in LibVNCServer 0.9.9 and earlier allows remote VNC servers to cause a den…
• CVE-2006-2450高 7.5auth.c in LibVNCServer 0.7.1 allows remote attackers to bypass authentication via a request in which the client specifies an insecure securi…