CVE-2014-6055 in LibVNCServer
Summary
Multiple stack-based buffer overflows in the File Transfer feature in rfbserver.c in LibVNCServer 0.9.9 and earlier allow remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a (1) long file or (2) directory name or the (3) FileTime attribute in a rfbFileTransferOffer message.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
09/01/2014
Disclosure
09/30/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 71696 | LibVNCServer rfbserver.c memory corruption | 119 | Not defined | Official fix | CVE-2014-6055 |