CVE-2019-20788
PoC —CVSS 3.1
9.8 critical
EPSS
2%p84
Published
()
Modified
Description
libvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and heap-based buffer overflow via a large height or width value. NOTE: this may overlap CVE-2019-15690.
- Vendors
- libvnc projectcanonicaldebiansiemens
- Products
- libvncserver, ubuntu linux, debian linux, simatic itc1500 firmware, simatic itc1500 pro firmware, simatic itc1900 firmware, simatic itc1900 pro firmware, simatic itc2200 firmware, simatic itc2200 pro firmware
- Weakness
- CWE-190, CWE-787
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.