CVE-2010-5304

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

A NULL pointer dereference flaw was found in the way LibVNCServer before 0.9.9 handled certain ClientCutText message. A remote attacker could use this flaw to crash the VNC server by sending a specially crafted ClientCutText message from a VNC client.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.fedoraproject.org/pipermail/package-announce/2014-October/139654.htmlMailing List, Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2014-October/139814.htmlMailing List, Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2014-October/140219.htmlMailing List, Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2014-September/139445.htmlMailing List, Third Party Advisory
http://seclists.org/oss-sec/2014/q3/639Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/09/23/6Mailing List, Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2014-October/139654.htmlMailing List, Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2014-October/139814.htmlMailing List, Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2014-October/140219.htmlMailing List, Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2014-September/139445.htmlMailing List, Third Party Advisory
http://seclists.org/oss-sec/2014/q3/639Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/09/23/6Mailing List, Third Party Advisory

Timeline

Published: Feb 5, 2020
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2010

CVE-2010-53059.8The potential exists for exposure of the product's password used to restrict unauthorized access to Rockwell PLC5/SLC5/0x/RSLogix 1785-Lx an CVE-2010-530610.0GE Healthcare Optima CT680, CT540, CT640, and CT520 has a default password of #bigguy for the root user, which has unspecified impact and at CVE-2010-530710.0The HIPAA configuration interface in GE Healthcare Optima MR360 has a password of (1) operator for the root account, (2) adw2.0 for the admi CVE-2010-530810.0GE Healthcare Optima MR360 does not require authentication for the HIPAA emergency login procedure, which allows physically proximate users CVE-2010-530910.0GE Healthcare CADStream Server has a default password of confirma for the admin user, which has unspecified impact and attack vectors.CVE-2010-531010.0The Acquisition Workstation for the GE Healthcare Revolution XQ/i has a password of adw3.1 for the sdc user, which has unspecified impact an CVE-2010-53126.1Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to i CVE-2010-53134.9Race condition in arch/x86/kvm/x86.c in the Linux kernel before 2.6.38 allows L2 guest OS users to cause a denial of service (L1 guest OS cr CVE-2010-53144.3Cross-site scripting (XSS) vulnerability in controllers/home_controller.php in BEdita before 3.1 allows remote attackers to inject arbitrary CVE-2010-53156.8Multiple cross-site request forgery (CSRF) vulnerabilities in BEdita before 3.1 allow remote attackers to hijack the authentication of admin CVE-2010-53164.3Cross-site scripting (XSS) vulnerability in as/index.php in SweetRice CMS before 0.6.7.1 allows remote attackers to inject arbitrary web scr CVE-2010-53177.5Multiple SQL injection vulnerabilities in index.php in SweetRice CMS before 0.6.7.1 allow remote attackers to execute arbitrary SQL commands