PT-2019-18958 · Ultravnc · Ultravnc

Publicado 2019-03-08 · Atualizado 2020-10-19 · CVE-2019-8269

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions UltraVNC revision 1206

Description The issue is a stack-based buffer overflow in the VNC client code within the FileTransfer module, leading to a denial of service (DoS) condition. This can be exploited via network connectivity.

Recommendations For UltraVNC revision 1206, update to revision 1207 to resolve the issue.

Correção

Stack Overflow

Memory Corruption

Enumeração de Fraquezas

CWE-121

CWE-787

Identificadores relacionados

CVE-2019-8269

Produtos afetados

Ultravnc

Referências · 5

• https://us-cert.gov/ics/advisories/icsa-20-161-06 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-8269 · Nota de Segurança
• https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-016-ultravnc-stack-based-buffer-overflow · Nota
• https://osv.dev/vulnerability/CVE-2019-8269 · Aviso do Fabricante
• https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf · Nota