CVE-2019-8268

Name of the Vulnerable Software and Affected Versions UltraVNC revision 1206

Description The issue is related to off-by-one vulnerabilities in the VNC client code of UltraVNC, specifically with the improper usage of the ClientConnection::ReadString function. This can potentially result in code execution. The attack is exploitable via network connectivity.

Recommendations For UltraVNC revision 1206, update to revision 1207 to resolve the issue. As a temporary workaround, consider restricting network connectivity to minimize the risk of exploitation.