A flaw was found in the way spice-client processed certain messages sent from the server. An attacker, having control of malicious spice-server, could use this flaw to crash the client or execute arbitrary code with permissions of the user running the client. spice-gtk versions through 0.34 are believed to be vulnerable.
A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
| Link | Tags |
|---|---|
| https://security.gentoo.org/glsa/201811-20 | vendor advisory |
| https://usn.ubuntu.com/3659-1/ | vendor advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=1501200 | issue tracking third party advisory |
| http://www.securityfocus.com/bid/103413 | vdb entry third party advisory |