CVE-2017-7393

Description

In TigerVNC 1.7.1 (VNCSConnectionST.cxx VNCSConnectionST::fence), an authenticated client can cause a double free, leading to denial of service or potentially code execution.

References

https://security.gentoo.org/glsa/201801-13

https://github.com/TigerVNC/tigervnc/pull/438

https://access.redhat.com/errata/RHSA-2017:2000

http://www.securityfocus.com/bid/97305

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3