CVE-2014-6055

概要

参考情報

• lists.fedoraproject.org/pipermail/package-announce/2014-October/139654.html · Third Party Advisory
• lists.fedoraproject.org/pipermail/package-announce/2014-September/139445.html · Third Party Advisory
• lists.opensuse.org/opensuse-updates/2015-12/msg00022.html
• rhn.redhat.com/errata/RHSA-2015-0113.html · Third Party Advisory
• seclists.org/oss-sec/2014/q3/639 · Mailing List
• secunia.com/advisories/61506
• debian.org/security/2014/dsa-3081 · Third Party Advisory
• ocert.org/advisories/ocert-2014-007.html · Third Party Advisory
• openwall.com/lists/oss-security/2014/09/25/11 · Mailing List
• securityfocus.com/bid/70096 · Third Party Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/96187
• newsoft/libvncserver commit 06ccdf0

libvncserver のその他の脆弱性

• CVE-2014-6053中 5.0The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier does not properly handle attempts t…
• CVE-2014-6052高 7.5The HandleRFBServerMessage function in libvncclient/rfbproto.c in LibVNCServer 0.9.9 and earlier does not check certain malloc return values…
• CVE-2014-6054中 4.3The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier allows remote attackers to cause a …
• CVE-2014-6051高 7.5Integer overflow in the MallocFrameBuffer function in vncviewer.c in LibVNCServer 0.9.9 and earlier allows remote VNC servers to cause a den…
• CVE-2006-2450高 7.5auth.c in LibVNCServer 0.7.1 allows remote attackers to bypass authentication via a request in which the client specifies an insecure securi…