CVE-2010-5304: Fedoraproject Fedora

High severity, CVSS 7.5. EPSS: 3.1% chance of exploitation in the next 30 days.

A NULL pointer dereference flaw was found in the way LibVNCServer before 0.9.9 handled certain ClientCutText message. A remote attacker could use this flaw to crash the VNC server by sending a specially crafted ClientCutText message from a VNC client.

Affected products

• Fedoraproject Fedora: version 19 only; version 20 only; version 21 only
• Libvncserver Project Libvncserver: before 0.9.9 (fixed in 0.9.9)

Published 2020-02-05. Last modified 2026-06-16.