PT-2019-4936 · Ultravnc · Ultravnc

Published

2019-03-05

·

Updated

2021-06-28

·

CVE-2019-8262

CVSS v2.0

10

Critical

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions UltraVNC versions prior to revision 1204
Description The issue is related to a heap buffer overflow in the Ultra decoder component of the VNC client in UltraVNC. This can be exploited by a remote attacker to execute arbitrary code. The exploitation of this issue is possible via network connectivity.
Recommendations For versions prior to revision 1204, update to revision 1204 or later to resolve the issue. As a temporary workaround, consider restricting network connectivity to minimize the risk of exploitation.

Fix

Buffer Overflow

Memory Corruption

Heap Based Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-119CWE-787CWE-122

Related Identifiers

BDU:2020-01544
CVE-2019-8262

Affected Products

Ultravnc