CVE-2007-0756 Null dereference in n/a
Remote attackers can crash the Chicken of the VNC client by sending a malformed ServerInit packet with an oversized computer name.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2007-0756?
CVE-2007-0756 is a high-severity vulnerability in n/a, published on 6 Feb 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Chicken of the VNC (cotv) 2.0 allows remote attackers to cause a denial of service (application crash) via a large computer-name size value in a ServerInit packet, which triggers a failed malloc and a resulting NULL dereference.
Which versions are affected by CVE-2007-0756?
It affects 1 product.
Products include Chicken of the Vnc Chicken of the Vnc.
How do I fix CVE-2007-0756?
No fix has been published for CVE-2007-0756 yet. Limit exposure of the affected software until one is available.
Is CVE-2007-0756 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2007-0756 exists.
Public exploit code: 1 Exploit-DB entry.
Sources
Also known as GHSA-8q68-54jr-f7ph.