CVE-2019-8258

2019-03-0515:00:00

CWE-122

Kaspersky

www.cve.org

AI Score

9.8

Confidence

High

EPSS

0.018

Percentile

88.3%

JSON

UltraVNC revision 1198 has a heap buffer overflow vulnerability in VNC client code which results code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1199.

CNA Affected

[
  {
    "product": "UltraVNC",
    "vendor": "UltraVNC",
    "versions": [
      {
        "status": "affected",
        "version": "1.2.2.3"
      }
    ]
  }
]