CVE-2017-5885: Integer Overflow
It was found that vncconnectionservermessage() and vnccolormapset() functions do not check for integer overflow properly, leading to a malicious server being able to overwrite parts of the client memory, possibly leading to remote code execution under privileges of user running the VNC client.
Upstream bug:
https://bugzilla.gnome.org/showbug.cgi?id=778050
Upstream patch:
https://git.gnome.org/browse/gtk-vnc/commit/?id=c8583fd3783c5b811590
Other sources
Multiple integer overflows in the (1) vncconnectionservermessage and (2) vnccolormapset functions in gtk-vnc before 0.7.0 allow remote servers to cause a denial of service (crash) or possibly execute arbitrary code via vectors involving SetColorMapEntries, which triggers a buffer overflow.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
gtk-vncto a version that resolves this vulnerability.Fixed in 0.7.0Patch c8583fd3783c5b811590
Event History
Frequently Asked Questions
What is the severity of CVE-2017-5885?
CVE-2017-5885 is considered critical due to its potential to allow remote code execution.
How do I fix CVE-2017-5885?
To fix CVE-2017-5885, you should update affected software such as GTK-VNC to version 0.6.1 or later.
What software is affected by CVE-2017-5885?
CVE-2017-5885 affects Fedora 25 and GTK-VNC versions up to and including 0.6.0.
What is the impact of CVE-2017-5885?
The impact of CVE-2017-5885 includes the potential for a malicious server to exploit integer overflow and gain control of the client's memory.
Can CVE-2017-5885 be exploited remotely?
Yes, CVE-2017-5885 can be exploited remotely by an attacker controlling a malicious VNC server.