Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2008-4770HistoryJan 16, 2009 - 9:30 p.m.
CVE-2008-4770
2009-01-1621:30:03
Debian Security Bug Tracker
security-tracker.debian.org
15
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS
0.076
Percentile
94.2%
The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0 through 4.1.2, Enterprise Edition E4.0 through E4.4.2, and Personal Edition P4.0 through P4.4.2 allows remote VNC servers to execute arbitrary code via crafted RFB protocol data, related to “encoding type.”
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 10 | all | vnc4 | < 4.1.1+X4.3.0-31 | vnc4_4.1.1+X4.3.0-31_all.deb |
Related
debian
debian
[SECURITY] [DSA 1716-1] New vnc4 packages fix remote code execution
2009-01-31 21:26:15
openvas
openvas
Oracle: Security Advisory (ELSA-2009-0261)
2015-10-08 00:00:00
RedHat Security Advisory RHSA-2009:0261
2009-02-13 00:00:00
CentOS Update for vnc CESA-2009:0261 centos4 i386
2011-08-09 00:00:00
ubuntucve
ubuntucve
CVE-2008-4770
2009-01-16 00:00:00
nessus
nessus
Debian DSA-1716-1 : vnc4 - integer overflow
2009-02-02 00:00:00
Solaris 10 (sparc) : 140455-03 (deprecated)
2009-01-19 00:00:00
Solaris 10 (x86) : 140456-03 (deprecated)
2009-01-19 00:00:00
fedora
fedora
[SECURITY] Fedora 10 Update: vnc-4.1.3-1.fc10
2009-01-27 01:50:52
[SECURITY] Fedora 9 Update: vnc-4.1.3-1.fc9
2009-01-27 01:51:41
centos
centos
vnc security update
2009-02-11 18:55:04
redhat
redhat
(RHSA-2009:0261) Moderate: vnc security update
2009-02-11 00:00:00
nvd
nvd
CVE-2008-4770
2009-01-16 21:30:03
oraclelinux
oraclelinux
vnc security update
2009-02-11 00:00:00
cve
cve
CVE-2008-4770
2009-01-16 21:30:03
kaspersky
kaspersky
KLA10308 ACE vulnerability in RealVNC
2009-01-16 00:00:00
gentoo
gentoo
Real VNC: User-assisted execution of arbitrary code
2009-03-09 00:00:00
osv
osv
vnc4 - remote code execution
2009-01-31 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:36:42
prion
prion
Code injection
2009-01-16 21:30:00
cvelist
cvelist
CVE-2008-4770
2009-01-16 21:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS
0.076
Percentile
94.2%
Related for DEBIANCVE:CVE-2008-4770