Integer Overflow and Buffer Overflow in LibVNCServer Affects Multiple Platforms

CVE-2019-20788

Summary

The HandleCursorShape function in the cursor.c file of LibVNCServer versions prior to 0.9.12 is susceptible to an integer overflow and heap-based buffer overflow, which can occur when handling large height or width values. This vulnerability may potentially allow an attacker to execute arbitrary code or cause a denial of service by crafting malicious VNC messages. Developers and users are advised to update to patched versions to mitigate these risks. Note that this vulnerability may have implications overlapping with another identified issue.

References