CVE-2019-8275

2019-03-0900:00:00

CWE-170

Kaspersky

www.cve.org

AI Score

9.8

Confidence

High

EPSS

0.109

Percentile

95.1%

JSON

UltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code, which result in out-of-bound data being accessed by remote users. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212.

CNA Affected

[
  {
    "product": "UltraVNC",
    "vendor": "Kaspersky Lab",
    "versions": [
      {
        "status": "affected",
        "version": "1.2.2.3"
      }
    ]
  }
]