CVE:CVE-2014-6055
CNNVD:CNNVD-201409-1172
LibVNCServer是一个VNC服务器C类库，它可开发VNC服务器或VNC客户端。
LibVNCServer 0.9.9及之前版本的rfbserver.c文件中的‘File Transfer’功能中存在基于栈的缓冲区溢出漏洞，该漏洞源于‘File Transfer’功能没有进行正确的边界检查。远程攻击者可通过rfbFileTransferOffer消息中的长文件名、目录名或FileTime属性利用该漏洞造成拒绝服务（崩溃）或执行任意代码。
solution:Upgrade fedoraproject fedora to a higher version than 20,21,and avoid the version 20,21; Upgrade debian debian_linux to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 6.5,and avoid the version 6.5; Upgrade redhat enterprise_linux_server_eus to a higher version than 6.5.z,and avoid the version 6.5.z; Upgrade libvncserver libvncserver to a higher version than 0.9.9,and avoid the version (,0.9.9]