CVE-2017-5581

Critical

Published: 28/02/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before version 1.7.1 allows remote servers to execute arbitrary code via an RRE message with subrectangle outside framebuffer boundaries.

Risk Assessment

Exploitation of this vulnerability could lead to remote code execution, posing a significant security risk to systems using TigerVNC.

Recommendation

It is recommended to update TigerVNC to version 1.7.1 or later to mitigate this vulnerability.

Original NVD description (English source)

Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before 1.7.1 allows remote servers to execute arbitrary code via an RRE message with subrectangle outside framebuffer boundaries.