CVE-2014-8240

CVE-2014-8240 describes an integer overflow vulnerability in TigerVNC that can lead to a denial of service (crash) and potentially arbitrary code execution. This flaw, similar to CVE-2014-6051, is triggered by remote VNC servers manipulating screen size handling, which results in a heap-based buffer overflow. With a CVSS score of 7.5, this vulnerability is considered highly severe, allowing an unauthenticated attacker to exploit it over the network with low attack complexity, potentially leading to partial confidentiality, integrity, and availability impacts. Despite its severity, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.