Vulnerabilities (CVE)

Filtered by vendor Tigervnc Subscribe
Filtered by product Tigervnc
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-0011 1 Tigervnc 1 Tigervnc 2020-01-14 7.5 HIGH 9.8 CRITICAL
Multiple heap-based buffer overflows in the ZRLE_DECODE function in common/rfb/zrleDecode.h in TigerVNC before 1.3.1, when NDEBUG is enabled, allow remote VNC servers to cause a denial of service (vncviewer crash) and possibly execute arbitrary code via vectors related to screen image rendering.
CVE-2017-5581 1 Tigervnc 1 Tigervnc 2018-01-05 6.8 MEDIUM 9.8 CRITICAL
Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before 1.7.1 allows remote servers to execute arbitrary code via an RRE message with subrectangle outside framebuffer boundaries.
CVE-2014-8241 2 Redhat, Tigervnc 5 Enterprise Linux Desktop, Enterprise Linux Hpc Node, Enterprise Linux Server and 2 more 2016-12-20 7.5 HIGH 9.8 CRITICAL
XRegion in TigerVNC allows remote VNC servers to cause a denial of service (NULL pointer dereference) by leveraging failure to check a malloc return value, a similar issue to CVE-2014-6052.