CVE-2017-5581

Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before 1.7.1 allows remote servers to execute arbitrary code via an RRE message with subrectangle outside framebuffer boundaries.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 87%
Affected Products (NVD)
VendorProductVersion
tigervnctigervnc
𝑥
≤ 1.7
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
tigervnc
bookworm
1.12.0+dfsg-8
fixed
bullseye
1.11.0+dfsg-2+deb11u1
fixed
sid
1.13.1+dfsg-3
fixed
trixie
1.13.1+dfsg-3
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
tigervnc
artful
ignored
bionic
not-affected
cosmic
not-affected
precise
dne
trusty
dne
xenial
dne
yakkety
dne
zesty
ignored
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
fltk
RHEL 7
0:1.3.4-1.el7
fixed
fltk-devel
RHEL 7
0:1.3.4-1.el7
fixed
fltk-fluid
RHEL 7
0:1.3.4-1.el7
fixed
fltk-static
RHEL 7
0:1.3.4-1.el7
fixed
tigervnc
RHEL 6
0:1.1.0-24.el6
fixed
RHEL 7
0:1.8.0-1.el7
fixed
tigervnc-icons
RHEL 7
0:1.8.0-1.el7
fixed
tigervnc-license
RHEL 7
0:1.8.0-1.el7
fixed
tigervnc-server
RHEL 6
0:1.1.0-24.el6
fixed
RHEL 7
0:1.8.0-1.el7
fixed
tigervnc-server-applet
RHEL 6
0:1.1.0-24.el6
fixed
RHEL 7
0:1.8.0-1.el7
fixed
tigervnc-server-minimal
RHEL 7
0:1.8.0-1.el7
fixed
tigervnc-server-module
RHEL 6
0:1.1.0-24.el6
fixed
RHEL 7
0:1.8.0-1.el7
fixed