IM
IronMonkey Threat Research

CVE-2019-8259 HIGH

Published: 2019-03-05 | Last Modified: 2026-06-17 | Status: Modified

Description

UltraVNC revision 1198 contains multiple memory leaks (CWE-655) in VNC client code, which allow an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1199.

Additional Descriptions (1)

UltraVNC, en su revisión 1198, contiene múltiples fugas de memoria (CWE-655) en el código del cliente VNC, lo que permite que un atacante lea memoria de la pila y puede aprovecharse para divulgar información. Si se combina con otra vulnerabilidad, puede emplearse para filtrar memoria de la pila y omitir el ASLR. Este ataque parece ser explotable mediante la conectividad de red. Esto se ha solucionado en la revisión 1199.

CVSS Metrics

Base Score: 7.5 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactHIGH
Integrity ImpactNONE
Availability ImpactNONE

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 3.6

Base Score: 5.0 (MEDIUM)

AV:N/AC:L/Au:N/C:P/I:N/A:N

Access VectorNETWORK
Access ComplexityLOW
AuthenticationNONE
Confidentiality ImpactPARTIAL
Integrity ImpactNONE
Availability ImpactNONE

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 2.9

Weaknesses

Source Type Description
[email protected] Secondary
en CWE-665
[email protected] Primary
en CWE-401

Affected Products

Vendor Product Version Update Type
uvnc ultravnc * <built-in method update of dict object at 0x7e6110c98700> Application
siemens sinumerik_access_mymachine\/p2p * <built-in method update of dict object at 0x7e60baa08340> Application
siemens sinumerik_pcu_base_win10_software\/ipc * <built-in method update of dict object at 0x7e60bb8845c0> Application
siemens sinumerik_pcu_base_win7_software\/ipc * <built-in method update of dict object at 0x7e613c4c1880> Application

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:uvnc:ultravnc:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:siemens:sinumerik_access_mymachine\/p2p:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:siemens:sinumerik_pcu_base_win10_software\/ipc:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:siemens:sinumerik_pcu_base_win7_software\/ipc:*:*:*:*:*:*:*:*
Notification
Message here