Andres Lopez Luksenberg

Researcher fromCore Security
#17864of 60,403
17.5Total CVSS
Vulnerabilities · 2
High
2
PT-2015-5694
2015-03-19
7.5
CVE-2015-2281
Fortinet
Fortinet Single Sign On
The issue is related to a stack-based buffer overflow in the collectoragent.exe component. This can be exploited by remote attackers who send a large PROCESS HELLO message to the Message Dispatcher on TCP port 8000, potentially allowing them to execute arbitrary code.
PT-2009-3044
2009-02-04
10
CVE-2009-0388
Ultravnc
Ultravnc
The issue is related to multiple integer signedness errors that can be exploited by remote VNC servers. This can lead to a denial of service, resulting in heap corruption and application crash, or possibly allow the execution of arbitrary code. The errors are related to the `ClientConnection::CheckBufferSize` and `ClientConnection::CheckFileZipBufferSize` functions in ClientConnection.cpp. A large length value in a message can trigger this issue.