Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

vinagre: arbitrary code execution

Package(s):

vinagre

CVE #(s):

CVE-2008-5660

Created:

January 12, 2009

Updated:

March 9, 2009

Description:

From the SUSE advisory:

A format string problem in vinagre potentially allowed malicious VNC servers to have a vinagre client that connects to the server execute arbitrary code. (CVE-2008-5660)

Alerts:

Gentoo	200903-01	2009-03-06
SuSE	SUSE-SR:2009:001	2009-01-12

(Log in to post comments)