CVE-2008-0610

2008-02-0612:00:00

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

High

EPSS

0.318

Percentile

97.1%

JSON

Stack-based buffer overflow in the ClientConnection::NegotiateProtocolVersion function in vncviewer/ClientConnection.cpp in vncviewer for UltraVNC 1.0.2 and 1.0.4 before 01252008, when in LISTENING mode or when using the DSM plugin, allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a modified size value.

Affected configurations

Nvd

Node

ultravncultravncMatch1.0.2

ultravncultravncMatch1.0.4

ultravncultravncMatch1.0.4_rc6

ultravncultravncMatch1.0.4_rc7

ultravncultravncMatch1.0.4_rc8

VendorProductVersionCPE
ultravncultravnc1.0.2cpe:2.3:a:ultravnc:ultravnc:1.0.2:*:*:*:*:*:*:*
ultravncultravnc1.0.4cpe:2.3:a:ultravnc:ultravnc:1.0.4:*:*:*:*:*:*:*
ultravncultravnc1.0.4_rc6cpe:2.3:a:ultravnc:ultravnc:1.0.4_rc6:*:*:*:*:*:*:*
ultravncultravnc1.0.4_rc7cpe:2.3:a:ultravnc:ultravnc:1.0.4_rc7:*:*:*:*:*:*:*
ultravncultravnc1.0.4_rc8cpe:2.3:a:ultravnc:ultravnc:1.0.4_rc8:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ultravnc	ultravnc	1.0.2	cpe:2.3:a:ultravnc:ultravnc:1.0.2:::::::*
ultravnc	ultravnc	1.0.4	cpe:2.3:a:ultravnc:ultravnc:1.0.4:::::::*
ultravnc	ultravnc	1.0.4_rc6	cpe:2.3:a:ultravnc:ultravnc:1.0.4_rc6:::::::*
ultravnc	ultravnc	1.0.4_rc7	cpe:2.3:a:ultravnc:ultravnc:1.0.4_rc7:::::::*
ultravnc	ultravnc	1.0.4_rc8	cpe:2.3:a:ultravnc:ultravnc:1.0.4_rc8:::::::*