← Back

CVE-2019-8274

nvd nist
Published: Mar 8, 2019Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer offer handler, which can potentially in result code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1212.

Affected (4)

Uvnc
1 product
Ultravnc
Siemens
3 products
Sinumerik Access Mymachine/p2p
Sinumerik Pcu Base Win10 Software/ipc
Sinumerik Pcu Base Win7 Software/ipc
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Ultravnc
Before 1.2.2.3
Configuration B
3 vulnerable
Vulnerable SoftwareAffected Versions
Sinumerik Access Mymachine/p2p
Before 4.8
Sinumerik Pcu Base Win10 Software/ipc
Before 14.00
Sinumerik Pcu Base Win7 Software/ipc
Up to 12.01

Related CWEs

CWE-122
Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (6)

Source: vulnerability@kaspersky.com
Third Party Advisory
Source: vulnerability@kaspersky.com
Third Party Advisory
Source: vulnerability@kaspersky.com
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource

Timeline

No history available yet.