Vulnerabilities > CVE-2017-18922 - Out-of-bounds Write vulnerability in multiple products

Summary

It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow.

Vulnerable Configurations

Common Weakness Enumeration (CWE)

• CWE-787 - Out-of-bounds Write

References