CVE-2019-8258
05.03.2019, 15:29
UltraVNC revision 1198 has a heap buffer overflow vulnerability in VNC client code which results code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1199.Enginsight
| Vendor | Product | Version |
|---|---|---|
| uvnc | ultravnc | 𝑥 < 1.2.2.3 |
| siemens | sinumerik_access_mymachine\/p2p | 𝑥 < 4.8 |
| siemens | sinumerik_pcu_base_win10_software\/ipc | 𝑥 < 14.00 |
| siemens | sinumerik_pcu_base_win7_software\/ipc | 𝑥 ≤ 12.01 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-122 - Heap-based Buffer OverflowA heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
- CWE-787 - Out-of-bounds WriteThe software writes data past the end, or before the beginning, of the intended buffer.
References