CVE-2014-6055

CVE-2014-6055 describes multiple stack-based buffer overflows in the File Transfer feature of LibVNCServer versions 0.9.9 and earlier, impacting products like Debian, Fedora, and Red Hat. Authenticated attackers can trigger a denial of service or potentially execute arbitrary code by sending crafted rfbFileTransferOffer messages with overly long file/directory names or FileTime attributes. With a CVSS score of 6.5, this vulnerability is moderately severe, requiring authentication but having low attack complexity, and could lead to partial confidentiality, integrity, and availability compromise. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.