CVE-2011-0904: David King Vino

Low severity, CVSS 3.5. EPSS: 2.3% chance of exploitation in the next 30 days.

The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3, 2.32.x before 2.32.2, 3.0.x before 3.0.2, and 3.1.x before 3.1.1, when raw encoding is used, allows remote authenticated users to cause a denial of service (daemon crash) via a large (1) X position or (2) Y position value in a framebuffer update request that triggers an out-of-bounds memory access, related to the rfbTranslateNone and rfbSendRectEncodingRaw functions.

Affected products

• David King Vino: version 2.7 only; version 2.7.3 only; version 2.7.3.1 only; version 2.7.4 only; version 2.7.4.90 only; version 2.7.4.91 only; …

Published 2011-05-10. Last modified 2026-06-16.