LibVNCServer Heap Buffer Overflow Vulnerability in HandleCursorShape Function Allowing Remote Code Execution

A heap buffer overflow vulnerability has been identified in LibVNCServer versions through 0.9.12. The issue arises in the HandleCursorShape() function within libvncclient/cursor.c, where an attacker can send cursor shapes with specially crafted dimensions. This exploitation can lead to remote code execution.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected system.

Remediation

Users are advised to update LibVNCServer to version 0.9.12 or later.