GCVE - cpe:2.3:a:kaspersky:tigervnc:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:kaspersky:tigervnc:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Kaspersky (`0e3919d1-d2ab-5693-bce6-610f4c2052a6`)
Product	Tigervnc (`65d025c1-2c89-5ea6-8aa0-2ce7cc35cfdd`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-15695`	vulnerable	2026-06-03 14:39:48.114828	Details available TigerVNC version prior to 1.10.1 is vulnerable to stack buffer overflow, which could be triggered from CMsgReader::readSetCursor. This vulnerability occurs due to insufficient sanitization of PixelFormat. Since remote attacker can choose offset from start of the buffer to start writing his values, exploitation of this vulnerability could potentially result into remote code execution. This attack appear to be exploitable via network connectivity. Published: 2019-12-26T15:24:00.000Z Updated: 2024-08-05T00:56:22.455Z Open on db.gcve.eu Reference links https://github.com/TigerVNC/tigervnc/releases/tag/v1.10.1 https://www.openwall.com/lists/oss-security/2019/12/20/2 https://github.com/CendioOssman/tigervnc/commit/05e28490873a861379c943bf616614b78b558b89 http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00039.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-15694`	vulnerable	2026-06-03 14:39:48.114449	Details available TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which could be triggered from DecodeManager::decodeRect. Vulnerability occurs due to the signdness error in processing MemOutStream. Exploitation of this vulnerability could potentially result into remote code execution. This attack appear to be exploitable via network connectivity. Published: 2019-12-26T14:59:01.000Z Updated: 2024-08-05T00:56:22.428Z Open on db.gcve.eu Reference links https://github.com/CendioOssman/tigervnc/commit/0943c006c7d900dfc0281639e992791d6c567438 https://github.com/TigerVNC/tigervnc/releases/tag/v1.10.1 https://www.openwall.com/lists/oss-security/2019/12/20/2 http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00039.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-15693`	vulnerable	2026-06-03 14:39:48.114076	Details available TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which occurs in TightDecoder::FilterGradient. Exploitation of this vulnerability could potentially result into remote code execution. This attack appear to be exploitable via network connectivity. Published: 2019-12-26T14:57:33.000Z Updated: 2024-08-05T00:56:22.462Z Open on db.gcve.eu Reference links https://github.com/CendioOssman/tigervnc/commit/b4ada8d0c6dac98c8b91fc64d112569a8ae5fb95 https://github.com/TigerVNC/tigervnc/releases/tag/v1.10.1 https://www.openwall.com/lists/oss-security/2019/12/20/2 http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00039.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-15692`	vulnerable	2026-06-03 14:39:48.113677	Details available TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow. Vulnerability could be triggered from CopyRectDecoder due to incorrect value checks. Exploitation of this vulnerability could potentially result into remote code execution. This attack appear to be exploitable via network connectivity. Published: 2019-12-26T14:55:47.000Z Updated: 2024-08-05T00:56:22.409Z Open on db.gcve.eu Reference links https://github.com/CendioOssman/tigervnc/commit/996356b6c65ca165ee1ea46a571c32a1dc3c3821 https://github.com/TigerVNC/tigervnc/releases/tag/v1.10.1 https://www.openwall.com/lists/oss-security/2019/12/20/2 http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00039.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-15691`	vulnerable	2026-06-03 14:39:48.112638	Details available TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. If decoding routine would throw an exception, ZRLEDecoder may try to access stack variable, which has been already freed during the process of stack unwinding. Exploitation of this vulnerability could potentially result into remote code execution. This attack appear to be exploitable via network connectivity. Published: 2019-12-26T14:52:46.000Z Updated: 2024-08-05T00:56:22.245Z Open on db.gcve.eu Reference links https://github.com/CendioOssman/tigervnc/commit/d61a767d6842b530ffb532ddd5a3d233119aad40 https://github.com/TigerVNC/tigervnc/releases/tag/v1.10.1 https://www.openwall.com/lists/oss-security/2019/12/20/2 http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00039.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.