CVE:CVE-2014-6051
CNNVD:CNNVD-201409-1171
LibVNCServer是一款支持在程序中实现VNC（虚拟网络计算）服务器或客户端功能的跨平台C语言库。
LibVNCServer 0.9.9及之前版本的vncviewer.c文件中的‘MallocFrameBuffer’函数中存在数字错误漏洞。远程攻击者可通过特制的参数利用该漏洞造成拒绝服务（崩溃）或执行任意代码。
solution:Upgrade redhat enterprise_linux_server_aus to a higher version than 6.5,and avoid the version 6.5; Upgrade redhat enterprise_linux_server_eus to a higher version than 6.5.z,and avoid the version 6.5.z; Upgrade fedoraproject fedora to a higher version than 20,21,and avoid the version 20,21; Upgrade libvncserver libvncserver to a higher version than 0.9.9,and avoid the version (,0.9.9]; Upgrade debian debian_linux to a higher version than 7.0,and avoid the version 7.0; Upgrade oracle solaris to a higher version than 11.3,and avoid the version 11.3