CVE-2019-8259

UltraVNC revision 1198 contains multiple memory leaks CWE-655 in VNC client code, which allow an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appears to be...

CVE-2019-8259

CVE-2019-8259 affects UltraVNC revisions around 1198. The issue is memory leaks in the VNC client code that could allow reading stack memory and, with another vulnerability, bypass ASLR, potentially leading to information disclosure. Siem ens/ICS advisories confirm the condition and note that fix...