DeutschShown in its original language — a full translation is planned for a future version.
tigervnc: Mehrere Schwachstellen
view advisory published 2014-12-09
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in tigervnc ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen oder einen Denial of Service Zustand herbeizuführen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2014-8241US | critical9.8 | — | ||
XRegion in TigerVNC allows remote VNC servers to cause a denial of service (NULL pointer dereference) by leveraging failure to check a malloc return value, a similar issue to CVE-2… | ||||
| CVE-2014-8240US | high7.5 | — | ||
Integer overflow in TigerVNC allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to screen size handling, which t… | ||||
02
references
External citations — patches, advisories, analysis.
- oss-security mailing list vom 2014-12-09external
- Oracle Linux Security Advisory ELSA-2025-2861 vom 2025-04-01external
- Red Hat Security Advisory RHSA-2015:2233 vom 2015-11-19external
- WID-SEC-W-2025-0661 - CSAF Versionself
- WID-SEC-2025-0661 - Portal Versionself
- SUSE Security Advisory SUSE-SU-2014:1592-1 vom 2014-12-09external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan