Several vulnerabilities have been discovered in libvncserver, a library to
implement VNC server functionality. These vulnerabilities might result in the
execution of arbitrary code or denial of service in both the client and the
server side.
For the stable distribution (wheezy), these problems have been fixed in
version 0.9.9+dfsg-1+deb7u1.
For the unstable distribution (sid), these problems have been fixed in
version 0.9.9+dfsg-6.1.
We recommend that you upgrade your libvncserver packages.