CVE-2010-5304

No fix known EPSS 3%

A NULL pointer dereference flaw was found in the way LibVNCServer before 0.9.9 handled certain ClientCutText message. A remote attacker could use this flaw to crash the VNC server by sending a specially crafted ClientCutText message from a VNC client.

Published 2020-02-05 · CVE record · OSV

Products: libvncserver_project libvncserver, fedoraproject fedora