CVE-2017-7395

Name of the Vulnerable Software and Affected Versions TigerVNC version 1.7.1

Description The issue allows an authenticated client to crash the server by causing an integer overflow in the SMsgReader::readClientCutText function, located in the SMsgReader.cxx file.

Recommendations For TigerVNC version 1.7.1, as a temporary workaround, consider restricting access to the SMsgReader::readClientCutText function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.