CVE-2008-0610
- State
- Published
- Severity
- Not scored
- Published
- Feb 6, 2008
- Updated
- Aug 7, 2024
- Reserved
- Feb 5, 2008
Description
Stack-based buffer overflow in the ClientConnection::NegotiateProtocolVersion function in vncviewer/ClientConnection.cpp in vncviewer for UltraVNC 1.0.2 and 1.0.4 before 01252008, when in LISTENING mode or when using the DSM plugin, allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a modified size value.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://sourceforge.net/project/shownotes.php?release_id=571174&group_id=63887
- 27561vdb-entry
- VU#721460third-party-advisory
- 28747third-party-advisory
- http://forum.ultravnc.info/viewtopic.php?t=11850
- http://ultravnc.svn.sourceforge.net/viewvc/ultravnc/UltraVNC%20Project%20Root/UltraVNC/vncviewer/ClientConnection.cpp?sortby=date&r1=169&r2=168&pathrev=169
- 18666exploit
- 1019293vdb-entry
- ADV-2008-0392vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.