Stack-Based Buffer Overflows in UltraVNC Remote Desktop Software by UltraVNC
CVE-2008-5001

Currently unrated

Key Information:

Vendor

Ultravnc

Status
Vendor
CVE Published:
10 November 2008

What is CVE-2008-5001?

Multiple stack-based buffer overflow vulnerabilities exist in the vncviewer component of UltraVNC versions 1.0.2 and 1.0.4, allowing remote attackers to exploit these flaws in LISTENING mode or when utilizing the DSM plugin. Exploitation could result in a denial of service due to crashes or may enable attackers to execute arbitrary code through careful manipulation of unspecified parameters.

References

EPSS Score

5% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.