Debian/gtk-vnc: high 7.8
gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers to execute arbitrary code via the src x, y coordinates in a crafted (1) rre, (2) h
Action: Upgrade gtk-vnc to 0.6.0-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.6.0-3 | - |
Fixed versions
| 0.6.0-3 |
Sources
- osv: DEBIAN-CVE-2017-5884#Debian:13/gtk-vnc
- https://security-tracker.debian.org/tracker/CVE-2017-5884
published · modified · JSON