CVE-2019-8264

🗓️ 09 Mar 2019 00:00:00Reported by KasperskyType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 59 Views

UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside Ultra2 decoder, potentially resulting in code execution

Reporter	Title	Published	Views	Family All 9
CNVD	UltraVNC out-of-bounds access vulnerability (CNVD-2019-10286)	11 Mar 201900:00	–	cnvd
Cvelist	CVE-2019-8264	9 Mar 201900:00	–	cvelist
EUVD	EUVD-2019-17662	7 Oct 202500:30	–	euvd
ICS	Siemens SINUMERIK	9 Jun 202000:00	–	ics
ICS	Siemens SINAMICS Medium Voltage Products Remote Access (Update B)	11 May 202100:00	–	ics
ICS	Siemens SIMATIC UltraVNC HMI WinCC Products	11 May 202100:00	–	ics
NVD	CVE-2019-8264	8 Mar 201923:29	–	nvd
Prion	Design/Logic Flaw	8 Mar 201923:29	–	prion
Tenable Nessus	UltraVNC < 1.2.2.4 Multiple Vulnerabilities	19 Aug 202500:00	–	nessus

NVD

Node

uvnc ultravncRange<1.2.2.3

[
  {
    "product": "UltraVNC",
    "vendor": "Kaspersky Lab",
    "versions": [
      {
        "status": "affected",
        "version": "1.2.2.3"
      }
    ]
  }
]

Source	Link
us-cert	www.us-cert.gov/ics/advisories/icsa-20-161-06
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-940818.pdf
us-cert	www.us-cert.cisa.gov/ics/advisories/icsa-21-131-11
ics-cert	www.ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-011-ultravnc-access-of-memory-location-after-end-of-buffer/
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf

21 Nov 2024 04:49Current

9.4High risk

Vulners AI Score9.4

CVSS 27.5

CVSS 39.8

EPSS0.01643

ultravnc revision 1203 out-of-bounds access vulnerability vnc client ultra2 decoder code execution network connectivity cve-2019-8264