CVE-2011-0904: Buffer Overflow

First published: Thu Apr 07 2011(Updated: )

An out of bounds read flaw was found in the way vino, remote desktop system for GNOME processed certain framebuffer update requests from VNC client, when raw encoding was used. An attacker could use this flaw to send a specially-crafted request to vino, causing it to crash. Upstream bug report: [1] <a href="https://bugzilla.gnome.org/show_bug.cgi?id=641802">https://bugzilla.gnome.org/show_bug.cgi?id=641802</a> Relevant upstream commits (for gnome-2-28, gnome-2-30, gnome-2-32, gnome-3-0 and master branches): [2] <a href="http://git.gnome.org/browse/vino/commit/?id=dff52694a384fe95195f2211254026b752d63ec4">http://git.gnome.org/browse/vino/commit/?id=dff52694a384fe95195f2211254026b752d63ec4</a> [3] <a href="http://git.gnome.org/browse/vino/commit/?id=0c2c9175963fc56bf2af10e42867181332f96ce0">http://git.gnome.org/browse/vino/commit/?id=0c2c9175963fc56bf2af10e42867181332f96ce0</a> [4] <a href="http://git.gnome.org/browse/vino/commit/?id=e17bd4e369f90748654e31a4867211dc7610975d">http://git.gnome.org/browse/vino/commit/?id=e17bd4e369f90748654e31a4867211dc7610975d</a> [5] <a href="http://git.gnome.org/browse/vino/commit/?id=456dadbb5c5971d3448763a44c05b9ad033e522f">http://git.gnome.org/browse/vino/commit/?id=456dadbb5c5971d3448763a44c05b9ad033e522f</a> [6] <a href="http://git.gnome.org/browse/vino/commit/?id=8beefcf7792d343c10c919ee0c928c81f73b1279">http://git.gnome.org/browse/vino/commit/?id=8beefcf7792d343c10c919ee0c928c81f73b1279</a>

Credit: cve@mitre.org

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-historical
• collector/nvd-index
• agent/softwarecombine
• agent/first-publish-date
• agent/type
• collector/mitre-cve
• source/MITRE
• agent/references
• agent/last-modified-date
• agent/author
• agent/severity
• agent/weakness
• agent/remedy
• agent/description
• agent/event
• collector/redhat-bugzilla
• source/Red Hat
• alias/CVE-2011-0904
• agent/tags
• agent/trending
• vendor/david king
• canonical/david king vino
• version/david king vino/2.23.5
• version/david king vino/2.21.92
• version/david king vino/2.23
• version/david king vino/2.17.92
• version/david king vino/2.19.5
• version/david king vino/2.32.0
• version/david king vino/2.19
• version/david king vino/2.27.5
• version/david king vino/3.0.1
• version/david king vino/2.22
• version/david king vino/2.32.1
• version/david king vino/2.25.91
• version/david king vino/2.23.92
• version/david king vino/2.21.2
• version/david king vino/2.25.3
• version/david king vino/2.18
• version/david king vino/2.21.1
• version/david king vino/2.10
• version/david king vino/2.7.92
• version/david king vino/2.24.1
• version/david king vino/2.7.4.91
• version/david king vino/2.28.2
• version/david king vino/2.26.2
• version/david king vino/2.7.3.1
• version/david king vino/2.19.92
• version/david king vino/2.11
• version/david king vino/2.25.92
• version/david king vino/3.0.0
• version/david king vino/2.20.1
• version/david king vino/2.27.90
• version/david king vino/2.27
• version/david king vino/2.16
• version/david king vino/3.1
• version/david king vino/2.7.3
• version/david king vino/2.7.4
• version/david king vino/2.13.5
• version/david king vino/2.24
• version/david king vino/2.28.1
• version/david king vino/2.7.4.90
• version/david king vino/2.23.91
• version/david king vino/2.26
• version/david king vino/2.17.4
• version/david king vino/2.25.4
• version/david king vino/2.27.92
• version/david king vino/2.14
• version/david king vino/2.9
• version/david king vino/2.13
• version/david king vino/2.21
• version/david king vino/2.26.1
• version/david king vino/2.28
• version/david king vino/2.17
• version/david king vino/2.7
• version/david king vino/2.25.90
• version/david king vino/2.9.2
• version/david king vino/2.12
• version/david king vino/2.21.91
• version/david king vino/2.20
• version/david king vino/2.21.3
• version/david king vino/2.17.5
• version/david king vino/2.25
• version/david king vino/2.27.91
• version/david king vino/2.8
• version/david king vino/2.25.5
• version/david king vino/2.22.2
• version/david king vino/2.21.90
• version/david king vino/2.18.1
• version/david king vino/2.17.2
• version/david king vino/2.22.1
• version/david king vino/2.23.90
• version/david king vino/2.19.90
• version/david king vino/2.15