Memory Leak Vulnerabilities in UltraVNC Client

CVE-2019-8259

What is CVE-2019-8259?

UltraVNC revision 1198 is impacted by multiple memory leak vulnerabilities within its VNC client code, which can expose sensitive information by allowing an attacker to read stack memory. These vulnerabilities can be exploited remotely over network connections and, when combined with other weaknesses, may allow an attacker to bypass Address Space Layout Randomization (ASLR). Updates in revision 1199 have addressed these vulnerabilities, making it essential for users to upgrade to mitigate the risks associated with information disclosure.

References