CVE-2014-6053

概要

参考情報

• lists.opensuse.org/opensuse-updates/2015-12/msg00022.html
• seclists.org/oss-sec/2014/q3/639 · Mailing List
• secunia.com/advisories/61506
• secunia.com/advisories/61682
• ubuntu.com/usn/usn-2365-1 · Third Party Advisory
• debian.org/security/2014/dsa-3081 · Third Party Advisory
• ocert.org/advisories/ocert-2014-007.html · Third Party Advisory
• openwall.com/lists/oss-security/2014/09/25/11 · Mailing List
• newsoft/libvncserver commit 6037a90 · Issue Tracking
• lists.debian.org/debian-lts-announce/2019/10/msg00042.html
• lists.debian.org/debian-lts-announce/2019/11/msg00032.html
• lists.debian.org/debian-lts-announce/2019/12/msg00028.html
• security.gentoo.org/glsa/201507-07

libvncserver のその他の脆弱性

• CVE-2014-6052高 7.5The HandleRFBServerMessage function in libvncclient/rfbproto.c in LibVNCServer 0.9.9 and earlier does not check certain malloc return values…
• CVE-2014-6054中 4.3The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier allows remote attackers to cause a …
• CVE-2014-6055中 6.5Multiple stack-based buffer overflows in the File Transfer feature in rfbserver.c in LibVNCServer 0.9.9 and earlier allow remote authenticat…
• CVE-2014-6051高 7.5Integer overflow in the MallocFrameBuffer function in vncviewer.c in LibVNCServer 0.9.9 and earlier allows remote VNC servers to cause a den…
• CVE-2006-2450高 7.5auth.c in LibVNCServer 0.7.1 allows remote attackers to bypass authentication via a request in which the client specifies an insecure securi…