CVE-2011-0904
The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3, 2.32.x before 2.32.2, 3.0.x before 3.0.2, and 3.1.x before 3.1.1, when raw encoding is used, allows remote authenticated users to cause a…
Does this matter?
Lower severity and a low EPSS score (2.30%). Track it; it rarely justifies an emergency change on its own.
Description
The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3, 2.32.x before 2.32.2, 3.0.x before 3.0.2, and 3.1.x before 3.1.1, when raw encoding is used, allows remote authenticated users to cause a denial of service (daemon crash) via a large (1) X position or (2) Y position value in a framebuffer update request that triggers an out-of-bounds memory access, related to the rfbTranslateNone and rfbSendRectEncodingRaw functions.
- CVSS 2.0
- 3.5 LOWAV:N/AC:M/Au:S/C:N/I:N/A:P
- EPSS
- 2.30% probability · 83th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- david king/vino
- Source
- cve@mitre.org
EPSS 2.3% since 26 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
- http://ftp.gnome.org/pub/GNOME/sources/vino/2.28/vino-2.28.3.news
- http://ftp.gnome.org/pub/GNOME/sources/vino/2.32/vino-2.32.2.news
- http://ftp.gnome.org/pub/GNOME/sources/vino/3.0/vino-3.0.2.news
- http://git.gnome.org/browse/vino/commit/?id=0c2c9175963fc56bf2af10e42867181332f96ce0Patch
- http://git.gnome.org/browse/vino/commit/?id=456dadbb5c5971d3448763a44c05b9ad033e522fPatch
- http://git.gnome.org/browse/vino/commit/?id=8beefcf7792d343c10c919ee0c928c81f73b1279Patch
- http://git.gnome.org/browse/vino/commit/?id=d050a22b1c284b633c407ef92fde95c47e8fdb8aPatch
- http://git.gnome.org/browse/vino/commit/?id=dff52694a384fe95195f2211254026b752d63ec4Patch
- http://git.gnome.org/browse/vino/commit/?id=e17bd4e369f90748654e31a4867211dc7610975dPatch
- http://git.gnome.org/browse/vino/log/?h=gnome-2-30Patch
- http://git.gnome.org/browse/vino/tree/NEWS
- http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html
- http://rhn.redhat.com/errata/RHSA-2013-0169.html
- http://secunia.com/advisories/44410Vendor Advisory
- http://secunia.com/advisories/44463Vendor Advisory
- http://www.debian.org/security/2011/dsa-2238
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:087
- http://www.securityfocus.com/bid/47681
- http://www.ubuntu.com/usn/usn-1128-1/
- http://www.vupen.com/english/advisories/2011/1144Vendor Advisory
- https://bugzilla.gnome.org/show_bug.cgi?id=641802Patch
- https://bugzilla.redhat.com/show_bug.cgi?id=694455Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67243
- http://ftp.gnome.org/pub/GNOME/sources/vino/2.28/vino-2.28.3.news
- http://ftp.gnome.org/pub/GNOME/sources/vino/2.32/vino-2.32.2.news
- http://ftp.gnome.org/pub/GNOME/sources/vino/3.0/vino-3.0.2.news
- http://git.gnome.org/browse/vino/commit/?id=0c2c9175963fc56bf2af10e42867181332f96ce0Patch
- http://git.gnome.org/browse/vino/commit/?id=456dadbb5c5971d3448763a44c05b9ad033e522fPatch
- http://git.gnome.org/browse/vino/commit/?id=8beefcf7792d343c10c919ee0c928c81f73b1279Patch
- http://git.gnome.org/browse/vino/commit/?id=d050a22b1c284b633c407ef92fde95c47e8fdb8aPatch
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.