CVE-2011-0904: Buffer Overflow
An out of bounds read flaw was found in the way vino, remote desktop system for GNOME processed certain framebuffer update requests from VNC client, when raw encoding was used. An attacker could use this flaw to send a specially-crafted request to vino, causing it to crash.
Upstream bug report: [1] https://bugzilla.gnome.org/showbug.cgi?id=641802
Relevant upstream commits (for gnome-2-28, gnome-2-30, gnome-2-32, gnome-3-0 and master branches):
[2] http://git.gnome.org/browse/vino/commit/?id=dff52694a384fe95195f2211254026b752d63ec4 [3] http://git.gnome.org/browse/vino/commit/?id=0c2c9175963fc56bf2af10e42867181332f96ce0 [4] http://git.gnome.org/browse/vino/commit/?id=e17bd4e369f90748654e31a4867211dc7610975d [5] http://git.gnome.org/browse/vino/commit/?id=456dadbb5c5971d3448763a44c05b9ad033e522f [6] http://git.gnome.org/browse/vino/commit/?id=8beefcf7792d343c10c919ee0c928c81f73b1279
Other sources
The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3, 2.32.x before 2.32.2, 3.0.x before 3.0.2, and 3.1.x before 3.1.1, when raw encoding is used, allows remote authenticated users to cause a denial of service (daemon crash) via a large (1) X position or (2) Y position value in a framebuffer update request that triggers an out-of-bounds memory access, related to the rfbTranslateNone and rfbSendRectEncodingRaw functions.
— MITRE
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-0904?
CVE-2011-0904 has a severity rating that indicates it could lead to potential denial-of-service attacks on the affected systems.
How do I fix CVE-2011-0904?
To fix CVE-2011-0904, update the Vino remote desktop software to a patched version provided by the vendor.
What versions of Vino are affected by CVE-2011-0904?
CVE-2011-0904 affects multiple versions of Vino, including versions 2.10 through 3.1.
Can CVE-2011-0904 be exploited remotely?
Yes, CVE-2011-0904 can be exploited remotely through specially crafted framebuffer update requests from a VNC client.
What are the potential impacts of CVE-2011-0904?
The potential impacts of CVE-2011-0904 include application crashes and subsequent denial of service for users trying to connect remotely.