CVE-2011-0905: The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before...

Security readout for executives and security teams

CVE-2011-0905 is a crash vulnerability in the Vino remote desktop server. An already authenticated remote user could send malformed framebuffer update dimensions when tight encoding is in use, causing the Vino daemon to crash. The documented impact is denial of service, not data theft or code execution. Exposure is likely limited to systems running affected Vino remote desktop versions with remote desktop enabled and accessible to authenticated VNC users. Internet exposure would increase operational risk, but the source bundle does not state unauthenticated exploitation. Treat as a targeted availability risk for legacy Linux desktop remote access. Prioritize remediation on exposed or shared desktop systems; otherwise handle through normal patch governance because authentication is required and evidence of active exploitation is absent. Mitigation focus: Upgrade Vino to a fixed version or vendor-supported package release.; Disable Vino remote desktop where it is not operationally required.; Restrict VNC access to trusted networks or VPN-controlled paths..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.