CVE-2014-6051

Integer overflow in the MallocFrameBuffer function in vncviewer.c in LibVNCServer 0.9.9 and earlier allows remote VNC servers to cause a denial of service…

published September 30, 2014

CVSS
—
EPSS
8%
Percentile
94.9
In the wild
Unconfirmed
What it is

Integer overflow in the MallocFrameBuffer function in vncviewer.c in LibVNCServer 0.9.9 and earlier allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitrary code via an advertisement for a large screen size, which triggers a heap-based buffer overflow.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08272 · 94.9th percentile
Published
2014-09-30T16:00Z
EPSS history
Timeline
  • 30 SEP 16:00Z
    Integer overflow in the MallocFrameBuffer function in vncviewer.c in LibVNCServer 0.9.9 and earlier allows remote VNC servers to cause a denial of service…
    cvelistv5