CRITICAL🇵🇱 Wersja polska

CVE-2019-8280

CVSS 9.8v3.0pub. 2019-03-08upd. 2024-11-21

UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside RAW decoder, which can potentially result code execution. This attack appear to be exploitable via network connectivity. This vulnerability has been fixed in revision 1204.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Uvnc Ultravnc

    APP
    Uvnc
    < 1.2.2.3
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCEMemory
CWE
References

Related vulnerabilities

CVE-2026-7840CRITICAL9.3PL ✓same product

UltraVNC Repeater: global buffer overflow w serwerze HTTP (RCE bez uwierzytelnienia)

CVE-2026-7839CRITICAL9.1PL ✓same product

UltraVNC Repeater — hardcoded domyślne hasło administratora HTTP

CVE-2019-8268CRITICAL9.8PL ✓same product

UltraVNC: wielokrotne podatności off-by-one umożliwiające RCE

CVE-2019-8265CRITICAL9.8PL ✓same product

UltraVNC – wielokrotne odczyty/zapisy poza buforem przez makro SETPIXELS

CVE-2019-8264CRITICAL9.8PL ✓same product

UltraVNC: podatność out-of-bounds w dekoderze Ultra2 klienta VNC (RCE)