Kaspersky Lab UltraVNC
16 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2019-8280 | 1.2.2.3 | UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside RAW decoder, which can potentially result code execution. | CRITICAL 9.8 | 4.2 % | ||
| CVE-2019-8277 | revision 1211 | UltraVNC revision 1211 contains multiple memory leaks (CWE-665) in VNC server code, which allows an attacker to read stack memory and can be | HIGH 7.5 | 3.0 % | ||
| CVE-2019-8276 | 1.2.2.3 | UltraVNC revision 1211 has a stack buffer overflow vulnerability in VNC server code inside file transfer request handler, which can result i | HIGH 7.5 | 5.7 % | ||
| CVE-2019-8275 | 1.2.2.3 | UltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code, which result in out-of-bound data being ac | CRITICAL 9.8 | 4.0 % | ||
| CVE-2019-8274 | 1.2.2.3 | UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer offer handler, which can potentially | CRITICAL 9.8 | 8.3 % | ||
| CVE-2019-8273 | 1.2.2.3 | UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer request handler, which can potential | CRITICAL 9.8 | 8.3 % | ||
| CVE-2019-8272 | 1.2.2.3 | UltraVNC revision 1211 has multiple off-by-one vulnerabilities in VNC server code, which can potentially result in code execution. This atta | CRITICAL 9.8 | 3.9 % | ||
| CVE-2019-8271 | 1.2.2.3 | UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer handler, which can potentially resul | CRITICAL 9.8 | 8.3 % | ||
| CVE-2019-8270 | 1.2.2.3 | UltraVNC revision 1210 has out-of-bounds read vulnerability in VNC client code inside Ultra decoder, which results in a denial of service (D | HIGH 7.5 | 1.9 % | ||
| CVE-2019-8269 | 1.2.2.3 | UltraVNC revision 1206 has stack-based Buffer overflow vulnerability in VNC client code inside FileTransfer module, which leads to a denial | HIGH 7.5 | 5.7 % | ||
| CVE-2019-8268 | 1.2.2.3 | UltraVNC revision 1206 has multiple off-by-one vulnerabilities in VNC client code connected with improper usage of ClientConnection::ReadStr | CRITICAL 9.8 | 3.9 % | ||
| CVE-2019-8267 | 1.2.2.3 | UltraVNC revision 1207 has out-of-bounds read vulnerability in VNC client code inside TextChat module, which results in a denial of service | HIGH 7.5 | 1.9 % | ||
| CVE-2019-8266 | 1.2.2.3 | UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of ClientConnection::Copybuffer funct | CRITICAL 9.8 | 2.8 % | ||
| CVE-2019-8265 | 1.2.2.3 | UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of SETPIXELS macro in VNC client code | CRITICAL 9.8 | 3.1 % | ||
| CVE-2019-8264 | 1.2.2.3 | UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside Ultra2 decoder, which can potentially result in code exec | CRITICAL 9.8 | 3.1 % | ||
| CVE-2019-8263 | 1.2.2.3 | UltraVNC revision 1205 has stack-based buffer overflow vulnerability in VNC client code inside ShowConnInfo routine, which leads to a denial | MEDIUM 6.5 | 2.5 % |