CVEブラウザに戻る

CVE-2019-8287

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.1880%

EPSS Percentile28.66th

Published2019年10月29日

Last Modified2024年11月21日

Vulnerability Description

TightVNC code version 1.3.10 contains global buffer overflow in HandleCoRREBBP macro function, which can potentially result code execution. This attack appear to be exploitable via network connectivity.

Affected Platforms (CPE)

📦

Tightvnc

Tightvnc

= 1.3.10

References & Advisories

🔗 https://cert-portal.siemens.com/productcert/pdf/ssa-478893.pdf

🔗 https://lists.debian.org/debian-lts-announce/2019/12/msg00028.html

🔗 https://us-cert.cisa.gov/ics/advisories/icsa-20-343-08

🔗 https://www.openwall.com/lists/oss-security/2018/12/10/5

🔗 https://cert-portal.siemens.com/productcert/pdf/ssa-478893.pdf

🔗 https://lists.debian.org/debian-lts-announce/2019/12/msg00028.html

🔗 https://us-cert.cisa.gov/ics/advisories/icsa-20-343-08

🔗 https://www.openwall.com/lists/oss-security/2018/12/10/5

関連する脆弱性情報

CVE-2009-038810.0

Multiple integer signedness errors in (1) UltraVNC 1.0.2 and 1.0.5 and (2) TightVnc 1.3.9 allow remote VNC servers to cause a deni...

CVE-2019-156799.8

TightVNC code version 1.3.10 contains heap buffer overflow in InitialiseRFBConnection function, which can potentially result code ...

CVE-2021-427859.8

Buffer Overflow vulnerability in tvnviewer.exe of TightVNC Viewer allows a remote attacker to execute arbitrary instructions via a...

CVE-2019-156789.8

TightVNC code version 1.3.10 contains heap buffer overflow in rfbServerCutText handler, which can potentially result code executio...