CVE-2019-8266 - AskarLabs CVE Database

CVE-2019-8266

Vendor Kaspersky Lab

Product UltraVNC

Weakness CWE-788

Published March 9, 2019

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of ClientConnection::Copybuffer function in VNC client code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. User interaction is required to trigger these vulnerabilities. These vulnerabilities have been fixed in revision 1208.

Key dates

02Disclosure timeline

March 9, 2019 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2019-8266 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/788.html

Related vulnerabilities

04Related CVE

CVE-2021-43012 Adobe Prelude M4A file memory corruption vulnerability could lead to remote code execution CVE-2021-44712 Adobe Acrobat Reader Memory Corruption could lead to Application denial-of-service CVE-2023-25506 CVE-2021-35996 Adobe After Effects Memory Corruption Could Lead To Arbitrary Code Execution CVE-2026-21316 Audition | Access of Memory Location After End of Buffer (CWE-788)