NVD

Id
82872  
Name
CVE-2017-5581  
Description
Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before 1.7.1 allows remote servers to execute arbitrary code via an RRE message with subrectangle outside framebuffer boundaries.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2017-02-28  
Modified Date
2017-06-30  
Seq
2017-5581  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
407871 82872 CVE-2016-8866 openSUSE-SU-2016:3233  View
407872 82872 CVE-2016-8866 openSUSE-SU-2017:0023  View
407873 82872 CVE-2016-8866 openSUSE-SU-2016:3238  View
407874 82872 CVE-2016-8866 [oss-security] 20161020 imagemagick: memory allocation failure in AcquireMagickMemory (memory.c) (incomplete fix for CVE-2016-8862)  View
407875 82872 CVE-2016-8866 [oss-security] 20161021 Re: imagemagick: memory allocation failure in AcquireMagickMemory (memory.c) (incomplete fix for CVE-2016-8862)  View
407876 82872 CVE-2016-8866 https://blogs.gentoo.org/ago/2016/10/20/imagemagick-memory-allocation-failure-in-acquiremagickmemory-memory-c-incomplete-fix-for-cve-2016-8862/  View
407877 82872 CVE-2016-8866 https://bugzilla.redhat.com/show_bug.cgi?id=1388816  View
407878 82872 CVE-2016-8866 https://github.com/ImageMagick/ImageMagick/issues/271  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
65565 JVNDB-2017-001928 TigerVNC の ModifiablePixelBuffer::fillRect 関数におけるバッファオーバーフローの脆弱性 TigerVNC の ModifiablePixelBuffer::fillRect 関数には、バッファオーバーフローの脆弱性が存在します。 CVE-2017-5581 CVE-2017-5581 82872 6.8 9.8 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-001928.html 2017-01-18 2017-03-23 View