First published: Thu Jul 13 2017(Updated: )
gtk-vnc 0.4.2 and older doesn't check framebuffer boundaries correctly when updating framebuffer which may lead to memory corruption when rendering
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
GTK-VNC | =0.4.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-1000044 is classified as a high severity vulnerability due to potential memory corruption.
To fix CVE-2017-1000044, upgrade to gtk-vnc version 0.4.3 or later which addresses the vulnerability.
Versions 0.4.2 and older of gtk-vnc are affected by CVE-2017-1000044.
CVE-2017-1000044 exploits improper boundary checking during framebuffer updates leading to memory corruption.
CVE-2017-1000044 is specifically a known vulnerability in installations of gtk-vnc version 0.4.2 and earlier.