CVE-2008-4770

2009-01-1621:30:03

CWE-20

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

Low

EPSS

0.076

Percentile

94.2%

JSON

The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0 through 4.1.2, Enterprise Edition E4.0 through E4.4.2, and Personal Edition P4.0 through P4.4.2 allows remote VNC servers to execute arbitrary code via crafted RFB protocol data, related to “encoding type.”

Affected configurations

Nvd

Node

realvncrealvncMatch4.0free

realvncrealvncMatch4.1.2free

realvncrealvncMatch4.4.2enterprise

realvncrealvncMatche4.0enterprise

realvncrealvncMatchp4.0personal

realvncrealvncMatchp4.4.2personal

VendorProductVersionCPE
realvncrealvnc4.0cpe:2.3:a:realvnc:realvnc:4.0:*:free:*:*:*:*:*
realvncrealvnc4.1.2cpe:2.3:a:realvnc:realvnc:4.1.2:*:free:*:*:*:*:*
realvncrealvnc4.4.2cpe:2.3:a:realvnc:realvnc:4.4.2:*:enterprise:*:*:*:*:*
realvncrealvnce4.0cpe:2.3:a:realvnc:realvnc:e4.0:*:enterprise:*:*:*:*:*
realvncrealvncp4.0cpe:2.3:a:realvnc:realvnc:p4.0:*:personal:*:*:*:*:*
realvncrealvncp4.4.2cpe:2.3:a:realvnc:realvnc:p4.4.2:*:personal:*:*:*:*:*

Vendor	Product	Version	CPE
realvnc	realvnc	4.0	cpe:2.3:a:realvnc:realvnc:4.0::free:::::
realvnc	realvnc	4.1.2	cpe:2.3:a:realvnc:realvnc:4.1.2::free:::::
realvnc	realvnc	4.4.2	cpe:2.3:a:realvnc:realvnc:4.4.2::enterprise:::::
realvnc	realvnc	e4.0	cpe:2.3:a:realvnc:realvnc:e4.0::enterprise:::::
realvnc	realvnc	p4.0	cpe:2.3:a:realvnc:realvnc:p4.0::personal:::::
realvnc	realvnc	p4.4.2	cpe:2.3:a:realvnc:realvnc:p4.4.2::personal:::::