CVE-2019-8269

UltraVNC revision 1206 has stack-based Buffer overflow vulnerability in VNC client code inside FileTransfer module, which leads to a denial of service (DoS) condition. This attack appear to be exploitable via network connectivity. This vulnerability has been fixed in revision 1207.

Published: Mar 9, 2019
Updated: Apr 13, 2023
CVE: CVE-2019-8269
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:N/I:N/A:P

CWEs:

CWE-787

Affected Software
References

Software	From	Fixed in
uvnc / ultravnc	-	1.2.2.3
siemens / sinumerik_pcu_base_win7_software/ipc	-	12.01.x
siemens / sinumerik_pcu_base_win10_software/ipc	-	14.00
siemens / sinumerik_access_mymachine/p2p	-	4.8

https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf
https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-016-ultravnc-stack-based-buffer-overflow/
https://www.us-cert.gov/ics/advisories/icsa-20-161-06

Vulnerability Database

CVE-2019-8269