NVD

Id
33667  
Name
CVE-2014-6055  
Description
Multiple stack-based buffer overflows in the File Transfer feature in rfbserver.c in LibVNCServer 0.9.9 and earlier allow remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a (1) long file or (2) directory name or the (3) FileTime attribute in a rfbFileTransferOffer message.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-09-30  
Modified Date
2016-12-21  
Seq
2014-6055  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
174913 33667 CVE-2014-6055 FEDORA-2014-11685  View
174914 33667 CVE-2014-6055 FEDORA-2014-11537  View
174915 33667 CVE-2014-6055 openSUSE-SU-2015:2207  View
174916 33667 CVE-2014-6055 RHSA-2015:0113  View
174917 33667 CVE-2014-6055 [oss-security] 20140923 Multiple issues in libVNCserver  View
174918 33667 CVE-2014-6055 DSA-3081  View
174919 33667 CVE-2014-6055 http://www.ocert.org/advisories/ocert-2014-007.html  View
174920 33667 CVE-2014-6055 [oss-security] 20140925 [oCERT-2014-007] libvncserver multiple issues  View
174921 33667 CVE-2014-6055 70096  View
174922 33667 CVE-2014-6055 libvncserver-cve20146055-bo(96187)  View
174923 33667 CVE-2014-6055 https://github.com/newsoft/libvncserver/commit/06ccdf016154fde8eccb5355613ba04c59127b2e  View
174924 33667 CVE-2014-6055 https://github.com/newsoft/libvncserver/commit/f528072216dec01cee7ca35d94e171a3b909e677  View
174925 33667 CVE-2014-6055 GLSA-201507-07  View
174926 33667 CVE-2014-6055 https://www.kde.org/info/security/advisory-20140923-1.txt  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15621 JVNDB-2014-004496 LibVNCServer の rfbserver.c の File Transfer 機能におけるスタックベースのバッファオーバーフローの脆弱性 LibVNCServer の rfbserver.c の File Transfer 機能には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2014-6055 73346 CVE-2014-6055 33667 6.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004496.html 2014-09-01 2015-05-25 View