CVE-2019-15690 — LibVNC / LibVNCServer

CVE-2019-15690

LibVNC / LibVNCServer PUBLISHED

Description (CNA)

LibVNCServer 0.9.12 release and earlier contains heap buffer overflow vulnerability within the HandleCursorShape() function in libvncclient/cursor.c. An attacker sends cursor shapes with specially crafted dimensions, which can result in remote code execution.

Affected (CNA)

Vendor / product	Versions
LibVNC / LibVNCServer	affected * through 0.9.12

CWE

CWE-122

References

https://ics-cert.kaspersky.com/vulnerabilities/klcert-20-009-remote-code-execution-on-libvnc-version-prior-to-0-9-12/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.