PT-2019-5271 · Ultravnc · Ultravnc

Publicado

2019-03-01

·

Atualizado

2020-10-22

·

CVE-2019-8276

CVSS v2.0

7.8

Alta

VetorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions UltraVNC revision 1211
Description The issue is related to a stack buffer overflow in the VNC server code inside the file transfer request handler, which can result in Denial of Service (DoS). This can be exploited via network connectivity.
Recommendations For UltraVNC revision 1211, update to revision 1212 to resolve the issue. As a temporary workaround, consider restricting network connectivity to minimize the risk of exploitation.

Correção

Stack Overflow

Buffer Overflow

Memory Corruption

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-121CWE-119CWE-787

Identificadores relacionados

BDU:2020-02167
CVE-2019-8276

Produtos afetados

Ultravnc