UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside RAW decoder, which can potentially result code execution. This attack appear to be exploitable via network connectivity. This vulnerability has been fixed in revision 1204.
UltraVNC, en su revisión 1203, tiene una vulnerabilidad de acceso fuera de límites en el cliente VNC dentro del decodificador RAW, lo que podría conducir a una ejecución de código. Este ataque parece ser explotable mediante la conectividad de red. Esta vulnerabilidad se ha solucionado en la revisión 1204.
AV:N/AC:L/Au:N/C:P/I:P/A:P
| Access Vector | NETWORK |
|---|---|
| Access Complexity | LOW |
| Authentication | NONE |
| Confidentiality Impact | PARTIAL |
| Integrity Impact | PARTIAL |
| Availability Impact | PARTIAL |
| Source | Type | Description |
|---|---|---|
| [email protected] | Secondary |
en
CWE-788
|
| [email protected] | Primary |
en
CWE-125
en
CWE-787
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| uvnc | ultravnc | * | <built-in method update of dict object at 0x7e60a8b7d440> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:uvnc:ultravnc:*:*:*:*:*:*:*:* |