Buffer Overflow in UltraVNC's vncviewer Affects Remote Code Execution
CVE-2008-0610
Key Information:
Badges
What is CVE-2008-0610?
The vulnerability in UltraVNC's vncviewer arises from a stack-based buffer overflow in the NegotiateProtocolVersion function. This issue occurs when the software is in LISTENING mode or when utilizing the DSM plugin. A remote attacker could exploit this flaw by sending specially crafted data, which might allow them to execute arbitrary code on the affected system, or to cause a denial of service (resulting in a crash). Users of UltraVNC 1.0.2 and 1.0.4 should take immediate action to update their software to mitigate the risks associated with this vulnerability.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.