CVE-2017-5885 describes multiple integer overflows in the gtk-vnc library, affecting versions prior to 0.7.0, specifically impacting Fedora and GNOME gtk-vnc implementations. This critical vulnerability (CVSS 9.8) allows unauthenticated remote attackers to trigger a denial of service or potentially execute arbitrary code through crafted SetColorMapEntries, leading to a buffer overflow. While no public exploits, Metasploit modules, or active exploitation have been observed, the high severity and remote attack vector warrant attention. Community discussion and media coverage for this CVE are minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
25CPE matchmatch criteria | cpe:2.3:o:fedoraproject:fedora:25:*:*:*:*:*:*:* | ||
<= 0.6.0CPE matchmatch criteria | cpe:2.3:a:gnome:gtk-vnc:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.