23 марта 2020
KLCERT-20-009: Remote Code Execution on LibVNC version prior to 0.9.12
Vendor
LibVNC
-
CVE-IDS
-
KLCERT
KLCERT-20-009
Timeline
Timeline
-
Kaspersky ICS CERT advisory published
23 марта 2020
-
Advisory published
декабря 2019
-
Vendor releases patch
декабря 2019
-
Vulnerabilities reported
декабря 2019
Description
Exploitability
Remotely
Attack complexity
User interaction
Impact
Existence of exploit
Unknown
Affected products
LibVNC client commit prior to 6073771eed1caf72f196e410182471e0dfd32149
Mitigation
Vendor mitigation
Update current version of LibVNC client.
Kaspersky publishes information on newly identified vulnerabilities in order to raise user awareness of the IT security threats detected. Kaspersky does not make any guarantees in respect of information received from vendors of products in which vulnerabilities have been identified, which is included in the following sections of the advisory: Affected Products, Vendor Mitigation.
Timeline
-
Kaspersky ICS CERT advisory published
23 марта 2020
-
Advisory published
декабря 2019
-
Vendor releases patch
декабря 2019
-
Vulnerabilities reported
декабря 2019