CVE-2017-5884

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2017-5884
gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers to execute arbitrary code via the src x, y coordinates in a crafted (1) rre, (2) hextile, or (3) copyrect tile.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector : AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

6.8 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://www.openwall.com/lists/oss-security/2017/02/03/5 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/02/05/5 Mailing List Third Party Advisory
http://www.securityfocus.com/bid/96016 Third Party Advisory VDB Entry
https://access.redhat.com/errata/RHSA-2017:2258
https://bugzilla.gnome.org/show_bug.cgi?id=778048 Exploit Issue Tracking
https://git.gnome.org/browse/gtk-vnc/commit/?id=ea0386933214c9178aaea9f2f85049ea3fa3e14a Patch Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LGPQ5MQR6SN4DYTEFACHP2PP5RR26KYK/
Configurations

Configuration 1 (hide)

cpe:2.3:o:fedoraproject:fedora:25:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:a:gnome:gtk-vnc:*:*:*:*:*:*:*:*
History

12 Feb 2023, 23:29

Type Values Removed Values Added
Summary It was found that gtk-vnc lacked proper bounds checking while processing messages using RRE, hextile, or copyrect encodings. A remote malicious VNC server could use this flaw to crash VNC viewers which are based on the gtk-vnc library. gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers to execute arbitrary code via the src x, y coordinates in a crafted (1) rre, (2) hextile, or (3) copyrect tile.
References
  • {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1418944', 'name': 'https://bugzilla.redhat.com/show_bug.cgi?id=1418944', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/security/cve/CVE-2017-5884', 'name': 'https://access.redhat.com/security/cve/CVE-2017-5884', 'tags': [], 'refsource': 'MISC'}

02 Feb 2023, 15:17

Type Values Removed Values Added
References
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LGPQ5MQR6SN4DYTEFACHP2PP5RR26KYK/', 'name': 'FEDORA-2017-ab04a91edd', 'tags': ['Third Party Advisory'], 'refsource': 'FEDORA'}
  • (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=1418944 -
  • (MISC) https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LGPQ5MQR6SN4DYTEFACHP2PP5RR26KYK/ -
  • (MISC) https://access.redhat.com/security/cve/CVE-2017-5884 -
Summary gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers to execute arbitrary code via the src x, y coordinates in a crafted (1) rre, (2) hextile, or (3) copyrect tile. It was found that gtk-vnc lacked proper bounds checking while processing messages using RRE, hextile, or copyrect encodings. A remote malicious VNC server could use this flaw to crash VNC viewers which are based on the gtk-vnc library.
Information

Published : 2017-02-28 18:59

Updated : 2023-12-10 12:01

NVD link : CVE-2017-5884

Mitre link : CVE-2017-5884

CVE.ORG link : CVE-2017-5884

JSON object : View

Products Affected

fedoraproject

  • fedora

gnome

  • gtk-vnc
CWE
CWE-118

Incorrect Access of Indexable Resource ('Range Error')