gtk-vnc 0.4.2 and older doesn't check framebuffer boundaries correctly when updating framebuffer which may lead to memory corruption when rendering

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - gtk-vnc: Integer overflow when processing SetColorMapEntries (CVE-2017-5885)

  - gtk-vnc 0.4.2 and older doesn't check framebuffer boundaries correctly when updating framebuffer which may     lead to memory corruption when rendering (CVE-2017-1000044)

  - gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows     remote servers to execute arbitrary code via the src x, y coordinates in a crafted (1) rre, (2) hextile,     or (3) copyrect tile. (CVE-2017-5884)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - gtk-vnc: Integer overflow when processing SetColorMapEntries (CVE-2017-5885)

  - gtk-vnc 0.4.2 and older doesn't check framebuffer boundaries correctly when updating framebuffer which may     lead to memory corruption when rendering (CVE-2017-1000044)

  - gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows     remote servers to execute arbitrary code via the src x, y coordinates in a crafted (1) rre, (2) hextile,     or (3) copyrect tile. (CVE-2017-5884)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

ID	Name	Product	Family	Severity
198760	RHEL 6 : gtk-vnc (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
198751	RHEL 5 : gtk-vnc (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
196187	RHEL 5 : gtk-vnc (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	critical
196130	RHEL 6 : gtk-vnc (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	critical

Detections

Analytics

CVE-2017-1000044

critical

Tenable Plugins

critical

critical

critical

critical