ZeroHour

CVE-2019-15692

PoC
CVSS 3.1
7.2 high
EPSS
5%p91
Published
()
Modified
Description

TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow. Vulnerability could be triggered from CopyRectDecoder due to incorrect value checks. Exploitation of this vulnerability could potentially result into remote code execution. This attack appear to be exploitable via network connectivity.

Vendors
tigervncopensuse
Products
tigervnc, leap
Weakness
CWE-122, CWE-787
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.