NVD

Id
33664  
Name
CVE-2014-6052  
Description
The HandleRFBServerMessage function in libvncclient/rfbproto.c in LibVNCServer 0.9.9 and earlier does not check certain malloc return values, which allows remote VNC servers to cause a denial of service (application crash) or possibly execute arbitrary code by specifying a large screen size in a (1) FramebufferUpdate, (2) ResizeFrameBuffer, or (3) PalmVNCReSizeFrameBuffer message.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-12-15  
Modified Date
2016-12-21  
Seq
2014-6052  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
174886 33664 CVE-2014-6052 openSUSE-SU-2015:2207  View
174887 33664 CVE-2014-6052 [oss-security] 20140923 Multiple issues in libVNCserver  View
174888 33664 CVE-2014-6052 USN-2365-1  View
174889 33664 CVE-2014-6052 DSA-3081  View
174890 33664 CVE-2014-6052 http://www.ocert.org/advisories/ocert-2014-007.html  View
174891 33664 CVE-2014-6052 [oss-security] 20140925 [oCERT-2014-007] libvncserver multiple issues  View
174892 33664 CVE-2014-6052 http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html  View
174893 33664 CVE-2014-6052 70091  View
174894 33664 CVE-2014-6052 https://github.com/newsoft/libvncserver/commit/85a778c0e45e87e35ee7199f1f25020648e8b812  View
174895 33664 CVE-2014-6052 GLSA-201507-07  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18348 JVNDB-2014-007223 LibVNCServer の libvncclient/rfbproto.c 内の HandleRFBServerMessage 関数におけるサービス運用妨害 (DoS) の脆弱性 LibVNCServer の libvncclient/rfbproto.c 内の HandleRFBServerMessage 関数は、特定の malloc 戻り値をチェックしないため、サービス運用妨害 (アプリケーションクラッシュ) 状態にされる、または任意のコードを実行される脆弱性が存在します。 CVE-2014-6052 73343 CVE-2014-6052 33664 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007223.html 2014-08-15 2015-10-30 View