CVE-2014-6051

Name of the Vulnerable Software and Affected Versions LibVNCServer versions 0.9.9 and earlier

Description The issue is related to an integer overflow in the MallocFrameBuffer function, which can be triggered by a remote VNC server advertising a large screen size. This can cause a heap-based buffer overflow, potentially leading to a denial of service (crash) and possibly allowing the execution of arbitrary code. The vulnerability may also allow a remote attacker to access confidential data, compromise its integrity, and cause a disruption of service.

Recommendations For LibVNCServer versions 0.9.9 and earlier, consider disabling the MallocFrameBuffer function as a temporary workaround until a patch is available. Restrict access to the VNC server to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.