← Back

CVE-2019-8260

nvd nist
Published: Mar 5, 2019Modified: Nov 21, 2024

JSON object

Loading...
9.8
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

UltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC client RRE decoder code, caused by multiplication overflow. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1200.

Affected (1)

Products: Uvnc: Ultravnc
Uvnc
1 product
Ultravnc
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Ultravnc
Before 1.2.2.3

Related CWEs

CWE-125
Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.

References (12)

Source: vulnerability@kaspersky.com
Source: vulnerability@kaspersky.com
Source: vulnerability@kaspersky.com
Source: vulnerability@kaspersky.com
Third Party Advisory
Source: vulnerability@kaspersky.com
Source: vulnerability@kaspersky.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.