RealVNC Clipboard Update Integer Overflow Vulnerability

Bugtraq ID:	19599
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 19 2006 12:00AM
Updated:	Aug 29 2006 09:13PM
Credit:	Discovery is credited to Niall FitzGibbon.
Vulnerable:	RealVNC RealVNC Free Edition 4.1.2 RealVNC RealVNC 4.1.2
Not Vulnerable:

RealVNC Clipboard Update Integer Overflow Vulnerability

An integer-overflow vulnerability occurs in RealVNC. This issue is related to clipboard updates that occur during an authenticated session. The attack may be initiated by a malicious server or client.

The researcher who discovered this issue has stated that the vulnerability will result in a denial of service.

RealVNC Clipboard Update Integer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

RealVNC Clipboard Update Integer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

RealVNC Clipboard Update Integer Overflow Vulnerability

References:

• RealVNC 4.1.2 minor heap corruption/DoS vulnerability (authentication required) (Niall FitzGibbon )
  
• RealVNC Homepage (RealVNC)