CVE-2011-0905: Buffer Overflow
First published: Thu Apr 07 2011(Updated: )
An out of bounds read flaw was found in the way vino, remote desktop system for GNOME processed certain framebuffer update requests from VNC client, when tight encoding was used. An attacker could use this flaw to send a specially-crafted request to vino, causing it to crash. Upstream bug report: [1] <a href="https://bugzilla.gnome.org/show_bug.cgi?id=641803">https://bugzilla.gnome.org/show_bug.cgi?id=641803</a> (not public yet) [2] <a href="https://bugzilla.gnome.org/show_bug.cgi?id=641802">https://bugzilla.gnome.org/show_bug.cgi?id=641802</a> (dedicated to <a href="https://access.redhat.com/security/cve/CVE-2011-0904">CVE-2011-0904</a> issue) Relevant upstream commits (for gnome-2-28, gnome-2-30, gnome-2-32, gnome-3-0 and master branches): [2] <a href="http://git.gnome.org/browse/vino/commit/?id=dff52694a384fe95195f2211254026b752d63ec4">http://git.gnome.org/browse/vino/commit/?id=dff52694a384fe95195f2211254026b752d63ec4</a> [3] <a href="http://git.gnome.org/browse/vino/commit/?id=0c2c9175963fc56bf2af10e42867181332f96ce0">http://git.gnome.org/browse/vino/commit/?id=0c2c9175963fc56bf2af10e42867181332f96ce0</a> [4] <a href="http://git.gnome.org/browse/vino/commit/?id=e17bd4e369f90748654e31a4867211dc7610975d">http://git.gnome.org/browse/vino/commit/?id=e17bd4e369f90748654e31a4867211dc7610975d</a> [5] <a href="http://git.gnome.org/browse/vino/commit/?id=456dadbb5c5971d3448763a44c05b9ad033e522f">http://git.gnome.org/browse/vino/commit/?id=456dadbb5c5971d3448763a44c05b9ad033e522f</a> [6] <a href="http://git.gnome.org/browse/vino/commit/?id=8beefcf7792d343c10c919ee0c928c81f73b1279">http://git.gnome.org/browse/vino/commit/?id=8beefcf7792d343c10c919ee0c928c81f73b1279</a>
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| David King Vino | =2.23.5 | |
| David King Vino | =2.21.92 | |
| David King Vino | =2.23 | |
| David King Vino | =2.17.92 | |
| David King Vino | =2.19.5 | |
| David King Vino | =2.32.0 | |
| David King Vino | =2.19 | |
| David King Vino | =2.27.5 | |
| David King Vino | =3.0.1 | |
| David King Vino | =2.22 | |
| David King Vino | =2.32.1 | |
| David King Vino | =2.25.91 | |
| David King Vino | =2.23.92 | |
| David King Vino | =2.21.2 | |
| David King Vino | =2.25.3 | |
| David King Vino | =2.18 | |
| David King Vino | =2.21.1 | |
| David King Vino | =2.10 | |
| David King Vino | =2.24.1 | |
| David King Vino | =2.28.2 | |
| David King Vino | =2.26.2 | |
| David King Vino | =2.19.92 | |
| David King Vino | =2.11 | |
| David King Vino | =2.25.92 | |
| David King Vino | =3.0.0 | |
| David King Vino | =2.20.1 | |
| David King Vino | =2.27.90 | |
| David King Vino | =2.27 | |
| David King Vino | =2.16 | |
| David King Vino | =3.1 | |
| David King Vino | =2.13.5 | |
| David King Vino | =2.24 | |
| David King Vino | =2.28.1 | |
| David King Vino | =2.23.91 | |
| David King Vino | =2.26 | |
| David King Vino | =2.17.4 | |
| David King Vino | =2.25.4 | |
| David King Vino | =2.27.92 | |
| David King Vino | =2.14 | |
| David King Vino | =2.13 | |
| David King Vino | =2.21 | |
| David King Vino | =2.26.1 | |
| David King Vino | =2.28 | |
| David King Vino | =2.17 | |
| David King Vino | =2.25.90 | |
| David King Vino | =2.12 | |
| David King Vino | =2.21.91 | |
| David King Vino | =2.20 | |
| David King Vino | =2.21.3 | |
| David King Vino | =2.17.5 | |
| David King Vino | =2.25 | |
| David King Vino | =2.27.91 | |
| David King Vino | =2.25.5 | |
| David King Vino | =2.22.2 | |
| David King Vino | =2.21.90 | |
| David King Vino | =2.18.1 | |
| David King Vino | =2.17.2 | |
| David King Vino | =2.22.1 | |
| David King Vino | =2.23.90 | |
| David King Vino | =2.19.90 | |
| David King Vino | =2.15 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.ubuntu.com/usn/usn-1128-1/
- http://www.securityfocus.com/bid/47681
- http://ftp.gnome.org/pub/GNOME/sources/vino/3.0/vino-3.0.2.news
- http://www.vupen.com/english/advisories/2011/1144
- http://secunia.com/advisories/44410
- http://ftp.gnome.org/pub/GNOME/sources/vino/2.32/vino-2.32.2.news
- http://git.gnome.org/browse/vino/tree/NEWS
- https://bugzilla.redhat.com/show_bug.cgi?id=694456
- http://git.gnome.org/browse/vino/commit/?id=8beefcf7792d343c10c919ee0c928c81f73b1279
- http://git.gnome.org/browse/vino/commit/?id=e17bd4e369f90748654e31a4867211dc7610975d
- http://ftp.gnome.org/pub/GNOME/sources/vino/2.28/vino-2.28.3.news
- http://git.gnome.org/browse/vino/commit/?id=d050a22b1c284b633c407ef92fde95c47e8fdb8a
- https://bugzilla.gnome.org/show_bug.cgi?id=641803
- http://git.gnome.org/browse/vino/commit/?id=456dadbb5c5971d3448763a44c05b9ad033e522f
- http://git.gnome.org/browse/vino/commit/?id=0c2c9175963fc56bf2af10e42867181332f96ce0
- http://git.gnome.org/browse/vino/commit/?id=dff52694a384fe95195f2211254026b752d63ec4
- http://secunia.com/advisories/44463
- http://git.gnome.org/browse/vino/log/?h=gnome-2-30
- http://www.debian.org/security/2011/dsa-2238
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:087
- http://rhn.redhat.com/errata/RHSA-2013-0169.html
- http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67244
- https://bugzilla.gnome.org/show_bug.cgi?id=641802
- https://access.redhat.com/security/cve/CVE-2011-0904
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=701712
- https://rhn.redhat.com/errata/RHSA-2013-0169.html
- collector/nvd-historical
- collector/nvd-index
- agent/type
- agent/softwarecombine
- agent/remedy
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/last-modified-date
- agent/author
- agent/tags
- agent/severity
- agent/weakness
- agent/description
- agent/event
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2011-0905
- vendor/david king
- canonical/david king vino
- version/david king vino/2.23.5
- version/david king vino/2.21.92
- version/david king vino/2.23
- version/david king vino/2.17.92
- version/david king vino/2.19.5
- version/david king vino/2.32.0
- version/david king vino/2.19
- version/david king vino/2.27.5
- version/david king vino/3.0.1
- version/david king vino/2.22
- version/david king vino/2.32.1
- version/david king vino/2.25.91
- version/david king vino/2.23.92
- version/david king vino/2.21.2
- version/david king vino/2.25.3
- version/david king vino/2.18
- version/david king vino/2.21.1
- version/david king vino/2.10
- version/david king vino/2.24.1
- version/david king vino/2.28.2
- version/david king vino/2.26.2
- version/david king vino/2.19.92
- version/david king vino/2.11
- version/david king vino/2.25.92
- version/david king vino/3.0.0
- version/david king vino/2.20.1
- version/david king vino/2.27.90
- version/david king vino/2.27
- version/david king vino/2.16
- version/david king vino/3.1
- version/david king vino/2.13.5
- version/david king vino/2.24
- version/david king vino/2.28.1
- version/david king vino/2.23.91
- version/david king vino/2.26
- version/david king vino/2.17.4
- version/david king vino/2.25.4
- version/david king vino/2.27.92
- version/david king vino/2.14
- version/david king vino/2.13
- version/david king vino/2.21
- version/david king vino/2.26.1
- version/david king vino/2.28
- version/david king vino/2.17
- version/david king vino/2.25.90
- version/david king vino/2.12
- version/david king vino/2.21.91
- version/david king vino/2.20
- version/david king vino/2.21.3
- version/david king vino/2.17.5
- version/david king vino/2.25
- version/david king vino/2.27.91
- version/david king vino/2.25.5
- version/david king vino/2.22.2
- version/david king vino/2.21.90
- version/david king vino/2.18.1
- version/david king vino/2.17.2
- version/david king vino/2.22.1
- version/david king vino/2.23.90
- version/david king vino/2.19.90
- version/david king vino/2.15