LibVNCServer Denial of Service Vulnerability (CVE-2014-6054)

LibVNCServer Denial of Service Vulnerability (CVE-2014-6054)

Release date:
Updated on: 2014-10-05

Affected Systems:
LibVNCServer
Description:
Bugtraq id: 70094
CVE (CAN) ID: CVE-2014-6054

LibVNCServer is a cross-platform C library that can implement VNC server or client functions in a program.

After LibVNCServer sets the scaling element to zero, there is a denial of service vulnerability in implementation. Attackers can exploit this vulnerability to cause the affected application to crash, resulting in DOS.

<* Source: Nicolas Ruff
*>

Suggestion:
Vendor patch:

LibVNCServer
------------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://libvnc.github.io/

This article permanently updates the link address: