Security Advisory

CVE-2019-15690

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-01-24 17:53:58
Last updated 2025-01-24 18:22:55
Assigner Kaspersky
State PUBLISHED

Description

LibVNCServer 0.9.12 release and earlier contains heap buffer overflow vulnerability within the HandleCursorShape() function in libvncclient/cursor.c. An attacker sends cursor shapes with specially crafted dimensions, which can result in remote code execution.