PT-2019-4937 · Ultravnc · Ultravnc

Publicado

2019-03-05

·

Atualizado

2021-06-28

·

CVE-2019-8280

CVSS v3.1

10

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions UltraVNC versions prior to revision 1204
Description The issue is related to an out-of-bounds access vulnerability in the VNC client inside the RAW decoder of UltraVNC, potentially allowing code execution. This vulnerability can be exploited via network connectivity.
Recommendations For versions prior to revision 1204, update to revision 1204 or later to resolve the issue. As a temporary workaround, consider restricting network connectivity to minimize the risk of exploitation.

Correção

Access of Memory Location After End of Buffer

Memory Corruption

Out of bounds Read

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-788CWE-787CWE-125

Identificadores relacionados

BDU:2020-01545
CVE-2019-8280

Produtos afetados

Ultravnc