CVE-2011-0905: Buffer Overflow
An out of bounds read flaw was found in the way vino, remote desktop system for GNOME processed certain framebuffer update requests from VNC client, when tight encoding was used. An attacker could use this flaw to send a specially-crafted request to vino, causing it to crash.
Upstream bug report: [1] https://bugzilla.gnome.org/showbug.cgi?id=641803 (not public yet) [2] https://bugzilla.gnome.org/showbug.cgi?id=641802 (dedicated to CVE-2011-0904 issue)
Relevant upstream commits (for gnome-2-28, gnome-2-30, gnome-2-32, gnome-3-0 and master branches):
[2] http://git.gnome.org/browse/vino/commit/?id=dff52694a384fe95195f2211254026b752d63ec4 [3] http://git.gnome.org/browse/vino/commit/?id=0c2c9175963fc56bf2af10e42867181332f96ce0 [4] http://git.gnome.org/browse/vino/commit/?id=e17bd4e369f90748654e31a4867211dc7610975d [5] http://git.gnome.org/browse/vino/commit/?id=456dadbb5c5971d3448763a44c05b9ad033e522f [6] http://git.gnome.org/browse/vino/commit/?id=8beefcf7792d343c10c919ee0c928c81f73b1279
Other sources
The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3, 2.32.x before 2.32.2, 3.0.x before 3.0.2, and 3.1.x before 3.1.1, when tight encoding is used, allows remote authenticated users to cause a denial of service (daemon crash) via crafted dimensions in a framebuffer update request that triggers an out-of-bounds read operation.
— MITRE
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-0905?
CVE-2011-0905 is considered a moderate severity vulnerability due to the potential crash it can cause in the vino remote desktop system.
How do I fix CVE-2011-0905?
To fix CVE-2011-0905, users should update their vino software to the latest patched version.
Which versions of vino are affected by CVE-2011-0905?
CVE-2011-0905 affects specific versions of vino including 2.10, 2.11, 2.12, and others up to 3.0.1.
Can CVE-2011-0905 be exploited remotely?
Yes, CVE-2011-0905 can be exploited remotely by sending specially-crafted requests to the vino server.
What impact does CVE-2011-0905 have on users?
The impact of CVE-2011-0905 on users is the potential crash of the vino remote desktop service, disrupting remote access.