CVEvulnerability

CVE-2011-0905

3.5 LOW Published 2011-05-10 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-05-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
3.5 LOW — AV:N/AC:M/Au:S/C:N/I:N/A:P
Weaknesses
CWE-119

Description

The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3, 2.32.x before 2.32.2, 3.0.x before 3.0.2, and 3.1.x before 3.1.1, when tight encoding is used, allows remote authenticated users to cause a denial of service (daemon crash) via crafted dimensions in a framebuffer update request that triggers an out-of-bounds read operation.

Affected configurations

• david king vino 2.10 • david king vino 2.11 • david king vino 2.12 • david king vino 2.13 • david king vino 2.13.5 • david king vino 2.14 • david king vino 2.15 • david king vino 2.16 • david king vino 2.17 • david king vino 2.17.2 • david king vino 2.17.4 • david king vino 2.17.5 • david king vino 2.17.92 • david king vino 2.18 • david king vino 2.18.1 • david king vino 2.19 • david king vino 2.19.5 • david king vino 2.19.90 • david king vino 2.19.92 • david king vino 2.20 • david king vino 2.20.1 • david king vino 2.21 • david king vino 2.21.1 • david king vino 2.21.2 • david king vino 2.21.3 • david king vino 2.21.90 • david king vino 2.21.91 • david king vino 2.21.92 • david king vino 2.22 • david king vino 2.22.1 • david king vino 2.22.2 • david king vino 2.23 • david king vino 2.23.5 • david king vino 2.23.90 • david king vino 2.23.91 • david king vino 2.23.92 • david king vino 2.24 • david king vino 2.24.1 • david king vino 2.25 • david king vino 2.25.3 • david king vino 2.25.4 • david king vino 2.25.5 • david king vino 2.25.90 • david king vino 2.25.91 • david king vino 2.25.92 • david king vino 2.26 • david king vino 2.26.1 • david king vino 2.26.2 • david king vino 2.27 • david king vino 2.27.5 • david king vino 2.27.90 • david king vino 2.27.91 • david king vino 2.27.92 • david king vino 2.28 • david king vino 2.28.1 • david king vino 2.28.2 • david king vino 2.32.0 • david king vino 2.32.1 • david king vino 3.0.0 • david king vino 3.0.1 … and 1 more

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References