CVE ID:	CVE-2018-7225
Description:	An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and potentially sensitive data or possibly unspecified other impact (e.g., an integer overflow) via specially crafted VNC packets.
Test IDs:	1.3.6.1.4.1.25623.1.1.2.2018.1176   1.3.6.1.4.1.25623.1.0.891332   1.3.6.1.4.1.25623.1.0.892014   1.3.6.1.4.1.25623.1.0.891979   1.3.6.1.4.1.25623.1.0.874325   1.3.6.1.4.1.25623.1.0.843499   1.3.6.1.4.1.25623.1.0.892045   1.3.6.1.4.1.25623.1.0.882897   1.3.6.1.4.1.25623.1.1.10.2018.0198   1.3.6.1.4.1.25623.1.0.874285   1.3.6.1.4.1.25623.1.0.704221   1.3.6.1.4.1.25623.1.1.4.2018.0875.1   1.3.6.1.4.1.25623.1.1.2.2018.1139
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2018-7225 BugTraq ID: 103107 http://www.securityfocus.com/bid/103107 Debian Security Information: DSA-4221 (Google Search) https://www.debian.org/security/2018/dsa-4221 https://security.gentoo.org/glsa/201908-05 http://www.openwall.com/lists/oss-security/2018/02/18/1 https://github.com/LibVNC/libvncserver/issues/218 https://lists.debian.org/debian-lts-announce/2018/03/msg00035.html https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html https://lists.debian.org/debian-lts-announce/2019/11/msg00032.html https://lists.debian.org/debian-lts-announce/2019/12/msg00028.html RedHat Security Advisories: RHSA-2018:1055 https://access.redhat.com/errata/RHSA-2018:1055 https://usn.ubuntu.com/3618-1/ https://usn.ubuntu.com/4547-1/ https://usn.ubuntu.com/4573-1/ https://usn.ubuntu.com/4587-1/