PT-2019-4932 · Ultravnc · Ultravnc

Publicado

2019-03-05

·

Atualizado

2020-10-19

·

CVE-2019-8258

CVSS v3.1

10

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions UltraVNC versions prior to revision 1199
Description The issue is related to a heap buffer overflow in the VNC client code, which can be exploited by a remote attacker to execute arbitrary code. The exploitation of this issue is possible via network connectivity.
Recommendations For versions prior to revision 1199, update to revision 1199 or later to resolve the issue. As a temporary workaround, consider restricting network connectivity to minimize the risk of exploitation.

Correção

Buffer Overflow

Memory Corruption

Heap Based Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119CWE-787CWE-122

Identificadores relacionados

BDU:2020-01540
CVE-2019-8258

Produtos afetados

Ultravnc