TigerVNC screen size Handling Integer Overflow Vulnerability

TigerVNC screen size Handling Integer Overflow Vulnerability

Release date:
Updated on:

Affected Systems:
TigerVNC
Description:
Bugtraq id: 70391

TigerVNC is an advanced VNC implementation.

TigerVNC has the integer overflow vulnerability in implementation. After successful exploitation, remote attackers can cause heap corruption or execute arbitrary code in the context of the affected application.

<* Source: Tim Waugh (twaugh@redhat.com)
*>

Suggestion:
Vendor patch:

TigerVNC
--------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://sourceforge.net/projects/tigervnc/

This article permanently updates the link address: