CVE-2017-1000044
CRITICALgtk-vnc 0.4.2 - Memory Corruption via Framebuffer Boundary Mismanagement
Title source: llmDescription
gtk-vnc 0.4.2 and older doesn't check framebuffer boundaries correctly when updating framebuffer which may lead to memory corruption when rendering
References (1)
Core 1
Core References
Patch, Vendor Advisory x_refsource_confirm
https://git.gnome.org/browse/gtk-vnc/commit/?id=f3fc5e57a78d4be9872f1394f697b9929873a737
Scores
CVSS v3
9.8
EPSS
0.0167
EPSS Percentile
82.3%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-119
Status
published
Products (1)
gnome/gtk-vnc
0.4.2
Published
Jul 17, 2017
Tracked Since
Feb 18, 2026