Download
| Alert*
|
oval:org.secpod.oval:def:703474
gtk-vnc: VNC viewer widget gtk-vnc could be made to crash or run programs if it received specially crafted network traffic. oval:org.secpod.oval:def:204675 The gtk-vnc packages provide a VNC viewer widget for GTK. The gtk-vnc widget is built by using co-routines, which allows the widget to be completely asynchronous while remaining single-threaded. The following packages have been upgraded to a later upstream version: gtk-vnc . Security Fix: * It was ... oval:org.secpod.oval:def:1800220 CVE-2017-5884: Improper check of framebuffer boundaries when processing a tile gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers to execute arbitrary code via the src x, y coordinates in a crafted rre, hextile, or copyrect tile. oval:org.secpod.oval:def:89045610 This update for gtk-vnc fixes the following issues: - CVE-2017-5885: Correctly validate color map range indexes . - CVE-2017-5884: Fix bounds checking for RRE, hextile copyrect encodings . - Fix crash when opening connection from a GSocketAddress . - Fix possible crash on connection failure . oval:org.secpod.oval:def:2101629 gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers to execute arbitrary code via the src x, y coordinates in a crafted (1) rre, (2) hextile, or (3) copyrect tile. oval:org.secpod.oval:def:112144 gtk-vnc is a VNC viewer widget for GTK. It is built using coroutines allowing it to be completely asynchronous while remaining single threaded. oval:org.secpod.oval:def:112158 gtk-vnc is a VNC viewer widget for GTK2. It is built using coroutines allowing it to be completely asynchronous while remaining single threaded. oval:org.secpod.oval:def:112098 gtk-vnc is a VNC viewer widget for GTK. It is built using coroutines allowing it to be completely asynchronous while remaining single threaded. oval:org.secpod.oval:def:112011 gtk-vnc is a VNC viewer widget for GTK2. It is built using coroutines allowing it to be completely asynchronous while remaining single threaded. oval:org.secpod.oval:def:502116 The gtk-vnc packages provide a VNC viewer widget for GTK. The gtk-vnc widget is built by using co-routines, which allows the widget to be completely asynchronous while remaining single-threaded. The following packages have been upgraded to a later upstream version: gtk-vnc . Security Fix: * It was ... oval:org.secpod.oval:def:1501980 The advisory is missing the security advisory description. For more information please visit the reference link oval:org.secpod.oval:def:52835 gtk-vnc: VNC viewer widget gtk-vnc could be made to crash or run programs if it received specially crafted network traffic. oval:org.secpod.oval:def:1800329 CVE-2017-5884: Improper check of framebuffer boundaries when processing a tile; gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers to execute arbitrary code via the src x, y coordinates in a crafted rre, hextile, or copyrect tile. |
