CVE-2010-5304

Katalog CVE

CVSS 7.5 · High EPSS 3,1%

Kerentanan NULL Pointer Dereference pada libvncserver project libvncserver, fedoraproject fedora. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A NULL pointer dereference flaw was found in the way LibVNCServer before 0.9.9 handled certain ClientCutText message. A remote attacker could use this flaw to crash the VNC server by sending a specially crafted ClientCutText message from a VNC client.

Rincian

Terbit di NVD

5 Februari 2020

Terakhir diubah

16 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-476: NULL Pointer Dereference

EPSS (30 hari)

3,1% peluang dieksploitasi; lebih tinggi dari 87,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://lists.fedoraproject.org/pipermail/package-announce/2014-October/139654.html mailing list · advisory pihak ketiga
• http://lists.fedoraproject.org/pipermail/package-announce/2014-October/139814.html mailing list · advisory pihak ketiga
• http://lists.fedoraproject.org/pipermail/package-announce/2014-October/140219.html mailing list · advisory pihak ketiga
• http://lists.fedoraproject.org/pipermail/package-announce/2014-September/139445.html mailing list · advisory pihak ketiga
• http://seclists.org/oss-sec/2014/q3/639 mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2014/09/23/6 mailing list · advisory pihak ketiga