KLA11371 ACE vulnerability in TightVNC

Integer signing errors were found in TightVNC. By exploiting this vulnerability malicious users can cause denial of service or possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed message.

Original advisories

Exploitation

Public exploits exist for this vulnerability.

Related products

TightVNC

TightVNC-Viewer

TightVNC-Server

CVE list

CVE-2009-0388 critical

Solution

Update to latest version

TightVNC

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• UltraVNC 1.0.2UltraVNC 1.0.5TightVnc 1.3.9