CVE-2017-5581
Fixed in a distro release EPSS 4%
Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before 1.7.1 allows remote servers to execute arbitrary code via an RRE message with subrectangle outside framebuffer boundaries.
Products: tigervnc
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | tigervnc | 1.7.0+dfsg-3 |
| Debian 13 | tigervnc | 1.7.0+dfsg-3 |
| Debian 14 | tigervnc | 1.7.0+dfsg-3 |
| Red Hat Enterprise Linux 6 | tigervnc | 0:1.1.0-24.el6 |
| Red Hat Enterprise Linux 6 | tigervnc-debuginfo | 0:1.1.0-24.el6 |
| Red Hat Enterprise Linux 6 | tigervnc-server | 0:1.1.0-24.el6 |
| Red Hat Enterprise Linux 6 | tigervnc-server-applet | 0:1.1.0-24.el6 |
| Red Hat Enterprise Linux 6 | tigervnc-server-module | 0:1.1.0-24.el6 |
| Red Hat Enterprise Linux 7 | fltk | 0:1.3.4-1.el7 |
| Red Hat Enterprise Linux 7 | fltk-debuginfo | 0:1.3.4-1.el7 |
| Red Hat Enterprise Linux 7 | fltk-devel | 0:1.3.4-1.el7 |
| Red Hat Enterprise Linux 7 | fltk-fluid | 0:1.3.4-1.el7 |
| Red Hat Enterprise Linux 7 | fltk-static | 0:1.3.4-1.el7 |
| Red Hat Enterprise Linux 7 | tigervnc | 0:1.8.0-1.el7 |
| Red Hat Enterprise Linux 7 | tigervnc-debuginfo | 0:1.8.0-1.el7 |
| Red Hat Enterprise Linux 7 | tigervnc-icons | 0:1.8.0-1.el7 |
| Red Hat Enterprise Linux 7 | tigervnc-license | 0:1.8.0-1.el7 |
| Red Hat Enterprise Linux 7 | tigervnc-server | 0:1.8.0-1.el7 |
| Red Hat Enterprise Linux 7 | tigervnc-server-applet | 0:1.8.0-1.el7 |
| Red Hat Enterprise Linux 7 | tigervnc-server-minimal | 0:1.8.0-1.el7 |
| Red Hat Enterprise Linux 7 | tigervnc-server-module | 0:1.8.0-1.el7 |