CVE-2019-8263
Description
UltraVNC revision 1205 has stack-based buffer overflow vulnerability in VNC client code inside ShowConnInfo routine, which leads to a denial of service (DoS) condition. This attack appear to be exploitable via network connectivity. User interaction is required to trigger this vulnerability. This vulnerability has been fixed in revision 1206.
Risk Information
Base Score
6.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.832
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Multiple Vulnerabilities are affected in UltraVNC (MSI) (x64) 1.2.2.2 | Windows |
| Multiple Vulnerabilities are affected in UltraVNC (MSI) 1.2.2.2 | Windows |
| Multiple Vulnerabilities are affected in UltraVNC (x64) 1.2.2.2 | Windows |
| Multiple Vulnerabilities are affected in UltraVNC (x86) 1.2.2.2 | Windows |
Patch Details
Click to see the patches provided by ManageEngine for this CVE
| Patch ID | Patch Description |
|---|---|
| PATCH-349101 | UltraVNC (x64) (1.6.4.0) |
| PATCH-349100 | UltraVNC (1.6.4.0) |
References
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234