CVE-2019-8270

Published: Mar 8, 2019Modified: Jun 17, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

UltraVNC revision 1210 has out-of-bounds read vulnerability in VNC client code inside Ultra decoder, which results in a denial of service (DoS) condition. This attack appear to be exploitable via network connectivity. This vulnerability has been fixed in revision 1211.

Affected (1)

Products: Uvnc: Ultravnc

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Uvnc Ultravnc	Before 1.2.2.3

Related CWEs

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (6)

https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf

Source: vulnerability@kaspersky.com

https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-017-ultravnc-out-of-bounds-read/

Source: vulnerability@kaspersky.com

Third Party Advisory

https://www.us-cert.gov/ics/advisories/icsa-20-161-06

Source: vulnerability@kaspersky.com

https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-017-ultravnc-out-of-bounds-read/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.us-cert.gov/ics/advisories/icsa-20-161-06

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.