CVE-2008-4770

Published: Jan 16, 2009Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0 through 4.1.2, Enterprise Edition E4.0 through E4.4.2, and Personal Edition P4.0 through P4.4.2 allows remote VNC servers to execute arbitrary code via crafted RFB protocol data, related to "encoding type."

Affected (6)

Products: Realvnc: Realvnc

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Realvnc Realvnc	Version 4.0
Realvnc Realvnc	Version 4.1.2
Realvnc Realvnc	Version 4.4.2
Realvnc Realvnc	Version e4.0
Realvnc Realvnc	Version p4.0
Realvnc Realvnc	Version p4.4.2

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (34)

http://secunia.com/advisories/32317

Source: cve@mitre.org

http://secunia.com/advisories/33689

Source: cve@mitre.org

http://secunia.com/advisories/34184

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-21-140455-01-1

Source: cve@mitre.org

PatchVendor Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-26-248526-1

Source: cve@mitre.org

Vendor Advisory

http://www.gentoo.org/security/en/glsa/glsa-200903-17.xml

Source: cve@mitre.org

http://www.realvnc.com/pipermail/vnc-list/2008-November/059432.html

Source: cve@mitre.org

http://www.realvnc.com/products/free/4.1/release-notes.html

Source: cve@mitre.org

http://www.realvnc.com/products/upgrade.html

Source: cve@mitre.org

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2009-0261.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/31832

Source: cve@mitre.org

http://www.securityfocus.com/bid/33263

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/2868

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/45969

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/47937

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9367

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01025.html

Source: cve@mitre.org

http://secunia.com/advisories/32317

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/33689

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/34184

Source: af854a3a-2127-422b-91ae-364da2661108

http://sunsolve.sun.com/search/document.do?assetkey=1-21-140455-01-1

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-26-248526-1

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.gentoo.org/security/en/glsa/glsa-200903-17.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.realvnc.com/pipermail/vnc-list/2008-November/059432.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.realvnc.com/products/free/4.1/release-notes.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.realvnc.com/products/upgrade.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2009-0261.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/31832

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/33263

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/2868

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/45969

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/47937

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9367

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01025.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.