Denial Of Service (DoS) Through Integer Overflow

libvncserver.so is vulnerable to denial of service (DoS) attacks. The vulnerability exists in the vcSetXCutTextProc function of VNConsole.c where there the improper sanitization of the client-specified message length could cause a denial of service (DoS) thorugh an integer overflow issue when processing a malicious VNC packet.