PT-2019-5273
CVE-2019-8274
·
Published
2019-03-01
·
Updated
2020-10-22
Description by
CVSS 2.0
10
CriticalMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
UltraVNC revision 1211
Description
The issue is related to a heap buffer overflow in the VNC server code, specifically within the file transfer offer handler. This can potentially result in code execution and appears to be exploitable via network connectivity.
Recommendations
For UltraVNC revision 1211, update to revision 1212 to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾