Vulnerability Spotlight: VMWare VNC Vulnerabilities
Summary: Cisco Talos disclosed three vulnerabilities in the VNC implementation shared across VMware Workstation, Player, and ESXi, two of which allow code execution and one of which causes denial of service. TALOS-2017-0368/CVE-2017-4933 is a heap corruption in the proprietary VMWDynResolution request, TALOS-2017-0369/CVE-2017-4941 is a type confusion in the frame buffer and cursor handling that overflows the stack, and TALOS-2017-0376/CVE-2018-6957 is a lock counter that can only be incremented, letting an attacker shut down a virtual machine by opening many TCP connections.
Why it matters: An attacker only needs to initiate a VNC session to trigger these flaws, and the denial-of-service bug requires nothing more than opening enough TCP connections to bring a virtual machine down.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2017-4933CVE-2017-4941CVE-2018-6957
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026