CVE-2011-0904: The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before...

Security readout for executives and security teams

CVE-2011-0904 is a denial-of-service flaw in GNOME Vino remote desktop. An authenticated remote user could crash vino-server by triggering an out-of-bounds memory access during a framebuffer update. This affects old Vino branches and mainly matters where legacy remote desktop services remain enabled. Exposure is most likely on legacy Linux desktops or servers using GNOME Vino remote desktop versions before the fixed releases. The source states the attacker must be remote and authenticated, so risk depends on whether Vino is installed, enabled, reachable, and used by untrusted or broadly shared accounts. Treat this as a legacy exposure cleanup item unless Vino supports critical remote administration. It can disrupt remote desktop availability, but supplied evidence requires authentication and does not show active exploitation or code execution. Mitigation focus: Upgrade Vino or distro packages to a fixed vendor-supported version.; Disable vino-server where remote desktop is not operationally required.; Restrict Vino access to trusted management networks and users..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.