Critical severity9.8NVD Advisory· Published Feb 28, 2017· Updated Jun 17, 2026

CVE-2017-5581

Description

Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before 1.7.1 allows remote servers to execute arbitrary code via an RRE message with subrectangle outside framebuffer boundaries.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Tigervnc/Tigervnc2 versions
cpe:2.3:a:tigervnc:tigervnc:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:tigervnc:tigervnc:*:*:*:*:*:*:*:*range: <=1.7
- (no CPE)range: <1.7.1

Patches

Vulnerability mechanics

References

www.openwall.com/lists/oss-security/2017/01/22/1nvdMailing ListPatchThird Party Advisory
www.openwall.com/lists/oss-security/2017/01/25/6nvdMailing ListPatchThird Party Advisory
github.com/TigerVNC/tigervnc/commit/18c020124ff1b2441f714da2017f63dba50720banvdPatchThird Party Advisory
github.com/TigerVNC/tigervnc/pull/399nvdPatchThird Party Advisory
www.securityfocus.com/bid/95789nvdThird Party AdvisoryVDB Entry
github.com/TigerVNC/tigervnc/releases/tag/v1.7.1nvdRelease NotesThird Party Advisory
rhn.redhat.com/errata/RHSA-2017-0630.htmlnvd
access.redhat.com/errata/RHSA-2017:2000nvd
security.gentoo.org/glsa/201702-19nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000