CVE-2014-6052
Description
The HandleRFBServerMessage function in libvncclient/rfbproto.c in LibVNCServer 0.9.9 and earlier does not check certain malloc return values, which allows remote VNC servers to cause a denial of service (application crash) or possibly execute arbitrary code by specifying a large screen size in a (1) FramebufferUpdate, (2) ResizeFrameBuffer, or (3) PalmVNCReSizeFrameBuffer message.
Risk Information
Base Score
9.8
MODERATE
Vector
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
5.24
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| SUSE-SU-2015:2088-2(SUSE Linux Enterprise Server 12-SP1 ) LibVNCServer-debugsource-0.9.9-16.1.x86_64.rpm | Linux |
| SUSE-SU-2015:2088-2(SUSE Linux Enterprise Server 12-SP1 ) libvncclient0-0.9.9-16.1.x86_64.rpm | Linux |
| SUSE-SU-2015:2088-2(SUSE Linux Enterprise Server 12-SP1 ) libvncclient0-debuginfo-0.9.9-16.1.x86_64.rpm | Linux |
| SUSE-SU-2015:2088-2(SUSE Linux Enterprise Server 12-SP1 ) libvncserver0-0.9.9-16.1.x86_64.rpm | Linux |
| SUSE-SU-2015:2088-2(SUSE Linux Enterprise Server 12-SP1 ) libvncserver0-debuginfo-0.9.9-16.1.x86_64.rpm | Linux |
| didact tool which allows teachers to view and control computer labs (USN-4587-1) italc-client_2.0.2+dfsg1-4ubuntu0.1_i386.deb | Linux |
| didact tool which allows teachers to view and control computer labs (USN-4587-1) italc-client_2.0.2+dfsg1-4ubuntu0.1_amd64.deb | Linux |
| didact tool which allows teachers to view and control computer labs (USN-4587-1) italc-master_2.0.2+dfsg1-4ubuntu0.1_i386.deb | Linux |
| didact tool which allows teachers to view and control computer labs (USN-4587-1) italc-master_2.0.2+dfsg1-4ubuntu0.1_amd64.deb | Linux |
| didact tool which allows teachers to view and control computer labs (USN-4587-1) libitalccore_2.0.2+dfsg1-4ubuntu0.1_i386.deb | Linux |
| didact tool which allows teachers to view and control computer labs (USN-4587-1) libitalccore_2.0.2+dfsg1-4ubuntu0.1_amd64.deb | Linux |
| Libvncserver update (ELSA-2014-1826) libvncserver-0.9.7-7.el6_6.1.x86_64.rpm | Linux |
| Libvncserver-devel update (ELSA-2014-1826) libvncserver-devel-0.9.7-7.el6_6.1.x86_64.rpm | Linux |
| Libvncserver update (ELSA-2014-1826) libvncserver-0.9.7-7.el6_6.1.i686.rpm | Linux |
| Libvncserver-devel update (ELSA-2014-1826) libvncserver-devel-0.9.7-7.el6_6.1.i686.rpm | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234