What the vulnerability does

01Description

UltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC code inside client CoRRE decoder, caused by multiplication overflow. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1200.

Key dates

02Disclosure timeline

March 5, 2019 CVE published
September 17, 2024 Record updated