envoy:health_check_fuzz_test: Invalid-free in std::__1::__function::__func<testing::internal::InvokeWithoutArgsAction<Envoy::U

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=6608207488876544 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: healthcheckfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Invalid-free Crash Address: 0x625000007328 Cra...

envoy:health_check_fuzz_test: Invalid-free in std::__1::__function::__func<testing::internal::InvokeWithoutArgsAction<Envoy::U

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=6561991256309760 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: healthcheckfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Invalid-free Crash Address: 0x625000002328 Cra...

envoy:health_check_fuzz_test: Invalid-free in std::__1::__function::__func<testing::internal::InvokeWithoutArgsAction<Envoy::U

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=6271257425870848 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: healthcheckfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Invalid-free Crash Address: 0x625000002298 Cra...

envoy:health_check_fuzz_test: Invalid-free in std::__1::__function::__func<testing::internal::InvokeWithoutArgsAction<Envoy::U

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=4599443993264128 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: healthcheckfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Invalid-free Crash Address: 0x6240000d1be8 Cra...

The vulnerability of the ClientConnection::ReadString function in the VNC client component of the UltraVNC software, which is part of the monitoring, control, and remote maintenance module for commercial cold production equipment of TelevisGo, allows a perpetrator to execute arbitrary code.

The vulnerability of the ClientConnection::ReadString function in the VNC component of the UltraVNC software for remote desktop management systems, which is part of the monitoring, control, and remote maintenance module for commercial cold production equipment like TelevisGo, is related to a...

UltraVNC out-of-bounds access vulnerability (CNVD-2019-10288)

UltraVNC is an open source remote terminal control software for the Windows platform. A security vulnerability exists in the VNC client code in UltraVNC version 1207, which stems from the program incorrectly using the 'ClientConnection::Copybuffer' function. An attacker could exploit the...

CVE-2019-8266

CVE-2019-8266 affects UltraVNC revision 1207 where multiple out-of-bounds access vulnerabilities in the VNC client code (ClientConnection::Copybuffer) could lead to code execution. Exploitation is described as network‑based with user interaction required to trigger, and the issues were fixed in r...

CVE-2019-8268: Off-by-one Error

UltraVNC revision 1206 has multiple off-by-one vulnerabilities in VNC client code connected with improper usage of ClientConnection::ReadString function, which can potentially result code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been...

CVE-2019-8266: Access of Memory Location After End of Buffer

UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of ClientConnection::Copybuffer function in VNC client code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. User interaction is...

Code injection

UltraVNC revision 1206 has multiple off-by-one vulnerabilities in VNC client code connected with improper usage of ClientConnection::ReadString function, which can potentially result code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been...

Design/Logic Flaw

UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of ClientConnection::Copybuffer function in VNC client code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. User interaction is...

CVE-2019-8268

UltraVNC revision 1206 has multiple off-by-one vulnerabilities in VNC client code connected with improper usage of ClientConnection::ReadString function, which can potentially result code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been...

PT-2019-4940

Name of the Vulnerable Software and Affected Versions UltraVNC revision 1207 Description The issue is related to improper usage of the ClientConnection::Copybuffer function in the VNC client code, which can result in out-of-bounds access and potentially allow code execution. This can be exploited...

PT-2019-5277

Name of the Vulnerable Software and Affected Versions UltraVNC revision 1206 Description The issue is related to off-by-one vulnerabilities in the VNC client code of UltraVNC, specifically with the improper usage of the ClientConnection::ReadString function. This can potentially result in code...

TightVNC ClientConnection Multiple Integer Overflow Vulnerabilities (Linux)

This host is running TightVNC and is prone to Multiple Integer Overflow Vulnerability. OpenVAS Vulnerability Test $Id: secpodtightvncmultintoverflowvulnlin.nasl 5148 2017-01-31 13:16:55Z teissa $ TightVNC ClientConnection Multiple Integer Overflow Vulnerabilities Linux Authors: Sujit Ghosal...

UltraVNC < 1.0.5.4 ClientConnection Multiple Integer Overflow Vulnerabilities - Windows

UltraVNC is prone to multiple integer overflow vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

UltraVNC ClientConnection integer overflow

Added: 02/20/2009 CVE: CVE-2009-0388 BID: 33568 Background UltraVNC is free software for remote desktop access. Problem Multiple integer overflow vulnerabilities in the ClientConnection class allow command execution when a user connects to a VNC server which sends a message with a large length...

UltraVNC ClientConnection integer overflow

Added: 02/20/2009 CVE: CVE-2009-0388 BID: 33568 Background UltraVNC is free software for remote desktop access. Problem Multiple integer overflow vulnerabilities in the ClientConnection class allow command execution when a user connects to a VNC server which sends a message with a large length...

UltraVNC ClientConnection integer overflow

Added: 02/20/2009 CVE: CVE-2009-0388 BID: 33568 Background UltraVNC is free software for remote desktop access. Problem Multiple integer overflow vulnerabilities in the ClientConnection class allow command execution when a user connects to a VNC server which sends a message with a large length...

UltraVNC ClientConnection integer overflow

Added: 02/20/2009 CVE: CVE-2009-0388 BID: 33568 Background UltraVNC is free software for remote desktop access. Problem Multiple integer overflow vulnerabilities in the ClientConnection class allow command execution when a user connects to a VNC server which sends a message with a large length...