CVE

Id
75541  
CVE No.
CVE-2014-8240  
Status
Candidate  
Description
Integer overflow in TigerVNC allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to screen size handling, which triggers a heap-based buffer overflow, a similar issue to CVE-2014-6051.  
Phase
Assigned (20141011)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
700037 75541 CVE-2014-8240 MLIST:[oss-security] 20141010 Request for CVE assignment for tigervnc affected by similar flaws as in CVE-2014-6051 and CVE-2014-6052 of libvncserver  View
700038 75541 CVE-2014-8240 URL:http://seclists.org/oss-sec/2014/q4/278  View
700039 75541 CVE-2014-8240 MLIST:[oss-security] 20141011 Re: Request for CVE assignment for tigervnc affected by similar flaws as in CVE-2014-6051 and CVE-2014-6052 of libvncserver  View
700040 75541 CVE-2014-8240 URL:http://seclists.org/oss-sec/2014/q4/300  View
700041 75541 CVE-2014-8240 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=1151307  View
700042 75541 CVE-2014-8240 CONFIRM:http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html  View
700043 75541 CVE-2014-8240 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html  View
700044 75541 CVE-2014-8240 BID:70391  View
700045 75541 CVE-2014-8240 URL:http://www.securityfocus.com/bid/70391  View
700046 75541 CVE-2014-8240 XF:tigervnc-cve20148240-bo(96947)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
18398 JVNDB-2014-007273 CA Release Automation における SQL インジェクションの脆弱性 CA Release Automation (旧 iTKO LISA Release Automation) には、SQL インジェクションの脆弱性が存在します。 CVE-2014-8248 75541 6.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007273.html  View