← Back

CVE-2019-8276

nvd nist
Published: Mar 8, 2019Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

UltraVNC revision 1211 has a stack buffer overflow vulnerability in VNC server code inside file transfer request handler, which can result in Denial of Service (DoS). This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1212.

Affected (4)

Uvnc
1 product
Ultravnc
Siemens
3 products
Sinumerik Access Mymachine/p2p
Sinumerik Pcu Base Win10 Software/ipc
Sinumerik Pcu Base Win7 Software/ipc
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Ultravnc
Before 1.2.2.3
Configuration B
3 vulnerable
Vulnerable SoftwareAffected Versions
Sinumerik Access Mymachine/p2p
Before 4.8
Sinumerik Pcu Base Win10 Software/ipc
Before 14.00
Sinumerik Pcu Base Win7 Software/ipc
Up to 12.01

Related CWEs

CWE-121
Stack-based Buffer Overflow
A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (6)

Source: vulnerability@kaspersky.com
Third Party Advisory
Source: vulnerability@kaspersky.com
Third Party Advisory
Source: vulnerability@kaspersky.com
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource

Timeline

No history available yet.