CVE-2019-8265 - AskarLabs CVE Database

CVE-2019-8265

Vendor Kaspersky Lab

Product UltraVNC

Weakness CWE-788

Published March 9, 2019

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of SETPIXELS macro in VNC client code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1208.

Key dates

02Disclosure timeline

March 9, 2019 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2019-8265 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/788.html

Related vulnerabilities

04Related CVE

CVE-2021-43023 Adobe Premiere Rush EPS/TIFF File Memory Corruption Remote Code Execution CVE-2026-21316 Audition | Access of Memory Location After End of Buffer (CWE-788) CVE-2021-44712 Adobe Acrobat Reader Memory Corruption could lead to Application denial-of-service CVE-2021-40702 Adobe Premiere Elements psd Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution CVE-2021-40777 Adobe Media Encoder WAV file memory corruption vulnerability could lead to arbitrary code execution