DeutschShown in its original language — a full translation is planned for a future version.
tigervnc: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Benutzerrechten
view advisory published 2019-12-26
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in tigervnc ausnutzen, um beliebigen Programmcode mit Benutzerrechten auszuführen.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-15695US | high7.2 | — | ||
TigerVNC version prior to 1.10.1 is vulnerable to stack buffer overflow, which could be triggered from CMsgReader::readSetCursor. This vulnerability occurs due to insufficient sani… | ||||
| CVE-2019-15694US | high7.2 | — | ||
TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which could be triggered from DecodeManager::decodeRect. Vulnerability occurs due to the signdness error in… | ||||
| CVE-2019-15693US | high7.2 | — | ||
TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which occurs in TightDecoder::FilterGradient. Exploitation of this vulnerability could potentially result in… | ||||
| CVE-2019-15692US | high7.2 | — | ||
TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow. Vulnerability could be triggered from CopyRectDecoder due to incorrect value checks. Exploitation of this vu… | ||||
| CVE-2019-15691US | high7.2 | — | ||
TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. If decoding routine would throw an exc… | ||||
02
references
External citations — patches, advisories, analysis.
- SUSE Security Update SUSE-SU-2020:1749-1 vom 2020-06-26external
- Red Hat Security Advisory RHSA-2020:1497 vom 2020-04-16external
- Red Hat Security Advisory RHSA-2020:3875 vom 2020-09-29external
- NIST Database vom 2019-12-26external
- NIST Database vom 2019-12-26external
- NIST Database vom 2019-12-26external
- NIST Database vom 2019-12-26external
- NIST Database vom 2019-12-26external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan