PT-2019-5028 · Libvnc+5 · Libvncserver+5
Pavel Cheremushkin
·
Publicado
2019-12-20
·
Atualizado
2025-01-24
·
CVE-2019-15690
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
LibVNCServer versions 0.9.12 and earlier
Description
The issue is related to a heap buffer overflow in the
HandleCursorShape() function in libvncclient/cursor.c. This can be exploited by an attacker sending cursor shapes with specially crafted dimensions, potentially allowing remote code execution when connected to a malicious server.Recommendations
For LibVNCServer versions 0.9.12 and earlier, consider disabling the
HandleCursorShape() function until a patch is available to prevent potential remote code execution. Restrict access to the libvncclient/cursor.c module to minimize the risk of exploitation. Avoid using large cursor sizes when connected to untrusted servers. At the moment, there is no information about a newer version that contains a fix for this vulnerability.RCE
Heap Based Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Centos
Libvncserver
Linuxmint
Red Hat
Suse
Ubuntu