Ubuntu 11.04 USN-1128-1 Critical: Vino Denial of Service Issue

ubuntu

May 2, 2011

An attacker could send crafted input to Vino and cause it to crash.

Summary

An attacker could send crafted input to Vino and cause it to crash.

Software Description:

- vino: VNC server for GNOME

Details:

Kevin Chen discovered that Vino incorrectly handled certain client

framebuffer requests. A remote attacker could use this flaw to cause Vino

to crash, leading to a denial of service.

Topics Covered

security advisory denial of service software issue ubuntu vino

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.04:
  vino                            2.32.1-0ubuntu2.1

Ubuntu 10.10:
  vino                            2.32.0-0ubuntu1.2

Ubuntu 10.04 LTS:
  vino                            2.28.2-0ubuntu2.1

Ubuntu 8.04 LTS:
  vino                            2.22.2-0ubuntu1.1

After a standard system update you need to restart your session to make
all the necessary changes.