← Back

CVE-2019-8277

nvd nist
Published: Mar 8, 2019Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

UltraVNC revision 1211 contains multiple memory leaks (CWE-665) in VNC server code, which allows an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212.

Affected (4)

Uvnc
1 product
Ultravnc
Siemens
3 products
Sinumerik Access Mymachine/p2p
Sinumerik Pcu Base Win10 Software/ipc
Sinumerik Pcu Base Win7 Software/ipc
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Ultravnc
Before 1.2.2.3
Configuration B
3 vulnerable
Vulnerable SoftwareAffected Versions
Sinumerik Access Mymachine/p2p
Before 4.8
Sinumerik Pcu Base Win10 Software/ipc
Before 14.00
Sinumerik Pcu Base Win7 Software/ipc
Up to 12.01

Related CWEs

CWE-665
Improper Initialization
The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.

References (12)

Source: vulnerability@kaspersky.com
Source: vulnerability@kaspersky.com
Third Party Advisory
Source: vulnerability@kaspersky.com
Source: vulnerability@kaspersky.com
Third Party Advisory
Source: vulnerability@kaspersky.com
Source: vulnerability@kaspersky.com
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource

Timeline

No history available yet.