TigerVNC version before 1.10.1 is vulnerable to heap buffer overflow, which could be triggered from DecodeManager::decodeRect. Vulnerability occurs due to the signdness error in processing MemOutStream. Exploitation of this vulnerability could potentially result into remote code execution. This attack appear to be exploitable via network connectivity.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
tigervnc tigervnc |
||
opensuse leap 15.1 |