CVE-2014-6051

CVE-2014-6051 describes an integer overflow in the MallocFrameBuffer function of LibVNCServer versions 0.9.9 and earlier, impacting products like Debian, Fedora, Oracle, and Red Hat. This vulnerability allows a malicious VNC server to trigger a heap-based buffer overflow by advertising a large screen size, leading to a denial of service or potentially arbitrary code execution. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector and low complexity, allowing for partial confidentiality, integrity, and availability impact. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.