CVE-2017-1000044 Memory corruption in n/a
A boundary check error in gtk-vnc allows memory corruption during framebuffer updates, potentially enabling code execution or crashes.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2017-1000044?
CVE-2017-1000044 is a critical memory corruption vulnerability in n/a, published on 13 Jul 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
gtk-vnc 0.4.2 and older doesn't check framebuffer boundaries correctly when updating framebuffer which may lead to memory corruption when rendering
Weakness: CWE-119
Which versions are affected by CVE-2017-1000044?
It affects 1 product.
Products include Gnome Gtk-Vnc.
How do I fix CVE-2017-1000044?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2017-1000044 being exploited?
There is no known exploitation of CVE-2017-1000044 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2017-1000044, GHSA-j9j7-wxww-4jq7.