29 matches found
PT-2021-28349
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by a dynamic stack buffer overflow. The crash occurs during the execution of specific functions, including mdb...
CVE-2020-11040
CVE-2020-11040 affects FreeRDP versions up to 2.0.0, where an out-of-bounds data read from memory occurs in clear_decompress_subcode_rlex and is visualized as color on screen. The issue has been fixed in version 2.1.0. Related advisories from Debian, CentOS/RHEL, AlmaLinux, Amazon Linux 2 and CNV...
CVE-2020-11040
In FreeRDP less than or equal to 2.0.0, there is an out-of-bound data read from memory in cleardecompresssubcoderlex, visualized on screen as color. This has been patched in 2.1.0...
PT-2020-2560
Name of the Vulnerable Software and Affected Versions FreeRDP versions 2.0.0 and earlier Description The issue is related to an out-of-bound data read from memory in the clear decompress subcode rlex function, which can be visualized on screen as color. This can potentially allow a remote attacke...
CVE-2019-8275
UltraVNC revision 1211 contains multiple improper null termination vulnerabilities in the VNC server code, allowing out-of-bounds data access via network. CVSS v3.1 base score 9.8. Affected: UltraVNC 1211; fix: upgrade to revision 1212 (addressed in the same family of issues).
CVE-2019-8275: Improper Null Termination
UltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code, which result in out-of-bound data being accessed by remote users. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212...
Null pointer dereference
UltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code, which result in out-of-bound data being accessed by remote users. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212...
CVE-2019-8275
UltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code, which result in out-of-bound data being accessed by remote users. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212...
PT-2019-5272
Name of the Vulnerable Software and Affected Versions UltraVNC versions prior to revision 1212 UltraVNC revision 1211 Description The issue is related to insufficient input validation in the UltraVNC software, which is part of the TelevisGo monitoring, control, and remote maintenance block for...