CVE-2017-5581

6.8

MEDIUMCVSS v2

Published

February 28, 2017

Affected

3 projects

Assigned by

MITRE

Severity scale

010

Description

Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before 1.7.1 allows remote servers to execute arbitrary code via an RRE message with subrectangle outside framebuffer boundaries.

TigerVNC/tigervnc

GitHubHigh performance, multi-platform VNC client and server

<= 1.7NVD

CendioOssman/tigervnc

GitHub

<= 1.7NVD

TigerVNC

Chocolatey

More on this CVE

NVD↗GitHub Advisory↗

## tigervnc TigerVNC is a high-performance, platform-neutral implementation of VNC (Virtual Network Computing), a client/server application that allows users to launch and interact with graphical applications on remote machines. TigerVNC provides the levels of performance necessary to run 3D and video applications, and it attempts to maintain a common look and feel and re-use components, where possible, across the various platforms that it supports. TigerVNC also provides extensions for advanced authentication methods and TLS encryption. ### Package-specific issue If this package isn't up-to-date for some days, [Create an issue](https://github.com/tunisiano187/Chocolatey-packages/issues/new/choose) Support the package maintainer and [![Patreon](https://cdn.jsdelivr.net/gh/tunisiano187/Chocolatey-packages@d15c4e19c709e7148588d4523ffc6dd3cd3c7e5e/icons/patreon.png)](https://www.patreon.com/bePatron?u=39585820)

<= 1.7NVD

Security Advisories

CVE-2017-5581

Description

More on this CVE