CVE

Id
102705  
CVE No.
CVE-2017-5885  
Status
Candidate  
Description
Multiple integer overflows in the (1) vnc_connection_server_message and (2) vnc_color_map_set functions in gtk-vnc before 0.7.0 allow remote servers to cause a denial of service (crash) or possibly execute arbitrary code via vectors involving SetColorMapEntries, which triggers a buffer overflow.  
Phase
Assigned (20170204)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
805635 102705 CVE-2017-5885 MLIST:[oss-security] 20170203 CVE request for two input validation flaws in gtk-vnc  View
805636 102705 CVE-2017-5885 URL:http://www.openwall.com/lists/oss-security/2017/02/03/5  View
805637 102705 CVE-2017-5885 MLIST:[oss-security] 20170204 Re: CVE request for two input validation flaws in gtk-vnc  View
805638 102705 CVE-2017-5885 URL:http://www.openwall.com/lists/oss-security/2017/02/05/5  View
805639 102705 CVE-2017-5885 CONFIRM:https://bugzilla.gnome.org/show_bug.cgi?id=778050  View
805640 102705 CVE-2017-5885 CONFIRM:https://git.gnome.org/browse/gtk-vnc/commit/?id=c8583fd3783c5b811590fcb7bae4ce6e7344963e  View
805641 102705 CVE-2017-5885 FEDORA:FEDORA-2017-ab04a91edd  View
805642 102705 CVE-2017-5885 URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LGPQ5MQR6SN4DYTEFACHP2PP5RR26KYK/  View
805643 102705 CVE-2017-5885 BID:96016  View

Related JVN