CVE-2010-5304

A NULL pointer dereference flaw was found in the way LibVNCServer before 0.9.9 handled certain ClientCutText message. A remote attacker could use this flaw to crash the VNC server by sending a specially crafted ClientCutText message from a VNC client.

• CWE-476

• http://lists.fedoraproject.org/pipermail/package-announce/2014-October/139654.htmlMailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2014-October/139814.htmlMailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2014-October/140219.htmlMailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2014-September/139445.htmlMailing List, Third Party Advisory
• http://seclists.org/oss-sec/2014/q3/639Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2014/09/23/6Mailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2014-October/139654.htmlMailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2014-October/139814.htmlMailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2014-October/140219.htmlMailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2014-September/139445.htmlMailing List, Third Party Advisory
• http://seclists.org/oss-sec/2014/q3/639Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2014/09/23/6Mailing List, Third Party Advisory

Published

Feb 5, 2020

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-5298Race condition in the ssl3_read_bytes function in s3_pkt.c i…
• CVE-2010-5299Stack-based buffer overflow in MicroP 0.1.1.1600 allows remo…
• CVE-2010-5300Stack-based buffer overflow in Jzip 1.3 through 2.0.0.132900…
• CVE-2010-5301Stack-based buffer overflow in Kolibri 2.0 allows remote att…
• CVE-2010-5302Cross-site scripting (XSS) vulnerability in timthumb.php in …
• CVE-2010-5303Cross-site scripting (XSS) vulnerability in the displayError…
• CVE-2010-5305The potential exists for exposure of the product's password …
• CVE-2010-5306GE Healthcare Optima CT680, CT540, CT640, and CT520 has a de…
• CVE-2010-5307The HIPAA configuration interface in GE Healthcare Optima MR…
• CVE-2010-5308GE Healthcare Optima MR360 does not require authentication f…
• CVE-2010-5309GE Healthcare CADStream Server has a default password of con…
• CVE-2010-5310The Acquisition Workstation for the GE Healthcare Revolution…