Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2011-0904

EPSS 0.69% · P72
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2011-0904

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3, 2.32.x before 2.32.2, 3.0.x before 3.0.2, and 3.1.x before 3.1.1, when raw encoding is used, allows remote authenticated users to cause a denial of service (daemon crash) via a large (1) X position or (2) Y position value in a framebuffer update request that triggers an out-of-bounds memory access, related to the rfbTranslateNone and rfbSendRectEncodingRaw functions.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
David King Vino帧缓冲更新处理缓冲区溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Vino中存在缓冲区溢出漏洞。该漏洞是由于当处理客户端帧缓冲更新请求时，server/libvncserver/rfbserver.c中的“rfbSendFramebufferUpdate()”函数产生的错误导致的。远程认证用户可以借助帧缓冲更新请求中超大的X或Y方位的值导致拒绝服务（守护进程崩溃），该请求可触发越界内存访问。 该漏洞位于以下版本中：Vino 2.28.3之前的2.x版本，2.32.2之前的2.32.x版本，3.0.2之前的3.0.x版本以及3.1.1之前的3.1.x版本。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2011-0904

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2011-0904

请登录查看更多情报信息。

Same Patch Batch · n/a · 2011-05-10 · 13 CVEs total

CVE-2010-0216Inventivetec MediaCast加密问题漏洞
CVE-2011-1271Microsoft .NET Framework JIT编译器访问限制绕过漏洞
CVE-2011-2076Inventivetec MediaCAST信息泄露漏洞
CVE-2011-2077Inventivetec MediaCAST New Atlanta BlueDragon管理界面默认配置错误漏洞
CVE-2011-2078Inventivetec MediaCAST New Atlanta BlueDragon管理界面多个跨站脚本攻击漏洞
CVE-2011-2079Inventivetec MediaCAST XML注入漏洞
CVE-2011-2080Inventivetec MediaCAST多个SQL注入漏洞
CVE-2011-2081Inventivetec MediaCAST敏感信息泄露漏洞
CVE-2011-0905David King Vino帧缓冲更新处理拒绝服务漏洞
CVE-2011-1824Opera VEGAOpBitmap::AddLine函数'SELECT'拒绝服务漏洞
CVE-2011-2074Skype客户端消息处理代码执行漏洞
CVE-2011-2075Google Chrome远程代码执行漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2011-0904

No comments yet

Leave a comment