CVE-2010-5304: Null Pointer Dereference
Published Feb 5, 2020
·Updated
A NULL pointer dereference flaw was found in the way LibVNCServer before 0.9.9 handled certain ClientCutText message. A remote attacker could use this flaw to crash the VNC server by sending a specially crafted ClientCutText message from a VNC client.
Affected Software
4 affected components
Libvncserver Project Libvncserver<0.9.9
Fedoraproject Fedora=19
Fedoraproject Fedora=20
Fedoraproject Fedora=21
Event History
Feb 5, 2020
CVE Published
via MITRE·07:35 PM
Data Sourced
via MITRE·07:35 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID of this flaw?
The vulnerability ID is CVE-2010-5304.
2
What is the severity of CVE-2010-5304?
The severity of CVE-2010-5304 is high (7 out of 10).
3
What is the affected software?
The affected software is Libvncserver Project Libvncserver version 0.9.9 and Fedora versions 19, 20, and 21.
4
What is the impact of this vulnerability?
A remote attacker can crash the VNC server by sending a specially crafted ClientCutText message from a VNC client.
5
How can I fix CVE-2010-5304?
Upgrade to Libvncserver version 0.9.9 or apply the appropriate patch provided by the vendor.