This host has RealVNC VNC Viewer installed and is prone to security vulnerability. The flaw is due to error in 'CMsgReader::readRect()' function in common/rfb/CMsgReader.cxx processing encoding types, and is exploited by sending specially crafted messages to the application.

Successful exploitation will allow execution of arbitrary code when user connects to a malicious server. Impact Level: Application

Update to version 4.1.3 http://www.realvnc.com/products/download.html

RealVNC VNC Free Edition version prior to 4.1.3

• http://secunia.com/advisories/32317/
• http://www.realvnc.com/products/free/4.1/release-notes.html

---

Updated on 2015-03-25