PT-2019-4937 · Ultravnc · Ultravnc

Published

2019-03-05

·

Updated

2021-06-28

·

CVE-2019-8280

CVSS v3.1

10

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions UltraVNC versions prior to revision 1204
Description The issue is related to an out-of-bounds access vulnerability in the VNC client inside the RAW decoder of UltraVNC, potentially allowing code execution. This vulnerability can be exploited via network connectivity.
Recommendations For versions prior to revision 1204, update to revision 1204 or later to resolve the issue. As a temporary workaround, consider restricting network connectivity to minimize the risk of exploitation.

Fix

Access of Memory Location After End of Buffer

Memory Corruption

Out of bounds Read

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-788CWE-787CWE-125

Related Identifiers

BDU:2020-01545
CVE-2019-8280

Affected Products

Ultravnc