{"id":"CVE-2014-0011","aliases":["EUVD-2014-0115","GHSA-v8hp-82fx-5fhc","MGASA-2014-0173","openSUSE-SU-2024:10056-1"],"status":"published","title":"Multiple heap-based buffer overflows in the ZRLE_DECODE function in common/rfb/zrleDecode.h in...","description":"Multiple heap-based buffer overflows in the ZRLE_DECODE function in common/rfb/zrleDecode.h in TigerVNC before 1.3.1, when NDEBUG is enabled, allow remote VNC servers to cause a denial of service (vncviewer crash) and possibly execute arbitrary code via vectors related to screen image rendering.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.02494,"percentile":0.84762,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2014-04-15T18:25:29Z","modified":"2026-06-17T00:02:05Z","fixes":[{"ecosystem":"Mageia:3","package":"tigervnc","fixed_in":["1.1.0-3.2.mga3"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"tigervnc","fixed_in":["1.3.0-2.1.mga4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:3","package":"tigervnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-3.2.mga3"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"tigervnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-2.1.mga4"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"tigervnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-2.1"}]}],"bundled":3}],"products":[{"vendor":"tigervnc","product":"tigervnc"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1050928","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Third Party Advisory","report"]},{"url":"https://github.com/TigerVNC/tigervnc/releases/tag/v1.3.1","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0011"},{"url":"https://github.com/advisories/GHSA-v8hp-82fx-5fhc"},{"url":"https://advisories.mageia.org/MGASA-2014-0173.html","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/pipermail/package-announce/2014-March/130495.html","tags":["web"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=13082","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0011","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8240","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0255","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2014-0011","description":"Multiple heap-based buffer overflows in the ZRLE_DECODE function in common/rfb/zrleDecode.h in TigerVNC before 1.3.1, when NDEBUG is enabled, allow remote VNC servers to cause a denial of service (vncviewer crash) and possibly execute arbitrary code via vectors related to screen image rendering.","status":"published","published":"2020-01-02T19:34:29Z","modified":"2024-08-06T08:58:26.465Z","updated_at":"2026-11-02T14:33:47.741012Z"}],"euvd":[{"id":"EUVD-2014-0115","description":"Multiple heap-based buffer overflows in the ZRLE_DECODE function in common/rfb/zrleDecode.h in TigerVNC before 1.3.1, when NDEBUG is enabled, allow remote VNC servers to cause a denial of service (vncviewer crash) and possibly execute arbitrary code via vectors related to screen image rendering.","status":"published","published":"2020-01-02T19:34:29Z","modified":"2024-08-06T08:58:26Z","updated_at":"2026-11-03T01:57:23.42372Z"}],"ghsa":[{"id":"GHSA-v8hp-82fx-5fhc","title":"Multiple heap-based buffer overflows in the ZRLE_DECODE function in common/rfb/zrleDecode.h in...","description":"Multiple heap-based buffer overflows in the ZRLE_DECODE function in common/rfb/zrleDecode.h in TigerVNC before 1.3.1, when NDEBUG is enabled, allow remote VNC servers to cause a denial of service (vncviewer crash) and possibly execute arbitrary code via vectors related to screen image rendering.","status":"published","published":"2022-05-17T19:57:11Z","modified":"2023-01-28T05:05:14Z","updated_at":"2026-11-02T14:44:19.055406Z"}],"nvd":[{"id":"CVE-2014-0011","description":"Multiple heap-based buffer overflows in the ZRLE_DECODE function in common/rfb/zrleDecode.h in TigerVNC before 1.3.1, when NDEBUG is enabled, allow remote VNC servers to cause a denial of service (vncviewer crash) and possibly execute arbitrary code via vectors related to screen image rendering.","status":"published","published":"2020-01-02T20:15:15.943Z","modified":"2026-06-17T00:02:05.083Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:02:59.461996Z"}],"osv":[{"id":"CVE-2014-0011","description":"Multiple heap-based buffer overflows in the ZRLE_DECODE function in common/rfb/zrleDecode.h in TigerVNC before 1.3.1, when NDEBUG is enabled, allow remote VNC servers to cause a denial of service (vncviewer crash) and possibly execute arbitrary code via vectors related to screen image rendering.","status":"withdrawn","published":"2020-01-02T20:15:15Z","modified":"2026-04-16T06:19:43.605839209Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:43:59.361892Z"},{"id":"MGASA-2014-0173","title":"Updated tigervnc packages fix CVE-2014-0011","description":"Updated tigervnc packages fix security vulnerability:\n\nA heap-based buffer overflow was found in the way vncviewer rendered certain\nscreen images from a vnc server. If a user could be tricked into connecting\nto a malicious vnc server, it may cause the vncviewer to crash, or could\npossibly execute arbitrary code with the permissions of the user running it.\nThis issue was due to an issue in the ZRLE_DECODE() function which performs\nRLE decoding (CVE-2014-0011).\n","status":"published","published":"2014-04-15T18:25:29Z","modified":"2026-04-16T06:24:55.983740265Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"openSUSE-SU-2024:10056-1","title":"libXvnc-devel-1.7.0-2.1 on GA media","description":"These are all security issues fixed in the libXvnc-devel-1.7.0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:28:32.863711Z","updated_at":"2026-11-02T16:58:33.135986Z"}]}}