CVE-2019-8280 - AskarLabs CVE Database

CVE-2019-8280

Vendor Kaspersky Lab

Product UltraVNC

Weakness CWE-788

Published March 9, 2019

Last update September 17, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside RAW decoder, which can potentially result code execution. This attack appear to be exploitable via network connectivity. This vulnerability has been fixed in revision 1204.

Key dates

02Disclosure timeline

March 9, 2019 CVE published

September 17, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2019-8280 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/788.html

Related vulnerabilities

04Related CVE

CVE-2021-45067 Adobe Acrobat Reader Memory Corruption could lead to Information Disclosure CVE-2021-40777 Adobe Media Encoder WAV file memory corruption vulnerability could lead to arbitrary code execution CVE-2021-40765 Adobe Character Animator Memory Corruption could lead to Arbitrary code execution CVE-2025-36581 CVE-2025-43580 Audition | Access of Memory Location After End of Buffer (CWE-788)