CVE-2017-5581

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before 1.7.1 allows remote servers to execute arbitrary code via an RRE message with subrectangle outside framebuffer boundaries.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://rhn.redhat.com/errata/RHSA-2017-0630.html
http://www.openwall.com/lists/oss-security/2017/01/22/1Mailing List, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/01/25/6Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/bid/95789Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2017:2000
https://github.com/TigerVNC/tigervnc/commit/18c020124ff1b2441f714da2017f63dba50720baPatch, Third Party Advisory
https://github.com/TigerVNC/tigervnc/pull/399Patch, Third Party Advisory
https://github.com/TigerVNC/tigervnc/releases/tag/v1.7.1Release Notes, Third Party Advisory
https://security.gentoo.org/glsa/201702-19
http://rhn.redhat.com/errata/RHSA-2017-0630.html
http://www.openwall.com/lists/oss-security/2017/01/22/1Mailing List, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/01/25/6Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/bid/95789Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2017:2000
https://github.com/TigerVNC/tigervnc/commit/18c020124ff1b2441f714da2017f63dba50720baPatch, Third Party Advisory
https://github.com/TigerVNC/tigervnc/pull/399Patch, Third Party Advisory
https://github.com/TigerVNC/tigervnc/releases/tag/v1.7.1Release Notes, Third Party Advisory
https://security.gentoo.org/glsa/201702-19

Timeline

Published: Feb 28, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-55836.5The Management Web Interface in Palo Alto Networks PAN-OS before 6.1.16, 7.0.x before 7.0.13, and 7.1.x before 7.1.8 allows remote authentic CVE-2017-55845.4Cross-site scripting (XSS) vulnerability in the Management Web Interface in Palo Alto Networks PAN-OS 5.1, 6.x before 6.1.16, 7.0.x before 7 CVE-2017-55858.8OpenText Documentum Content Server (formerly EMC Documentum Content Server) 7.3, when PostgreSQL Database is used and return_top_results_row CVE-2017-55869.8OpenText Documentum D2 (formerly EMC Documentum D2) 4.x allows remote attackers to execute arbitrary commands via a crafted serialized Java CVE-2017-55895.9An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, includ CVE-2017-55905.9An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, includ CVE-2017-55915.9An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, includ CVE-2017-55925.9An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, includ CVE-2017-55935.9An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, includ CVE-2017-55947.5An issue was discovered in Pagekit CMS before 1.0.11. In this vulnerability the remote attacker is able to reset the registered user's passw CVE-2017-55955.5A file disclosure and inclusion vulnerability exists in web/views/file.php in ZoneMinder 1.x through v1.30.0 because of unfiltered user-inpu CVE-2017-55967.5In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the ASTERIX dissector could go into an infinite loop, triggered by packet injection or a mal