返回 CVE 浏览器

CVE-2019-8287

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.1880%

EPSS Percentile28.66th

Published2019年10月29日

Last Modified2024年11月21日

Vulnerability Description

TightVNC code version 1.3.10 contains global buffer overflow in HandleCoRREBBP macro function, which can potentially result code execution. This attack appear to be exploitable via network connectivity.

Affected Platforms (CPE)

📦

Tightvnc

Tightvnc

= 1.3.10

References & Advisories

🔗 https://cert-portal.siemens.com/productcert/pdf/ssa-478893.pdf

🔗 https://lists.debian.org/debian-lts-announce/2019/12/msg00028.html

🔗 https://us-cert.cisa.gov/ics/advisories/icsa-20-343-08

🔗 https://www.openwall.com/lists/oss-security/2018/12/10/5

🔗 https://cert-portal.siemens.com/productcert/pdf/ssa-478893.pdf

🔗 https://lists.debian.org/debian-lts-announce/2019/12/msg00028.html

🔗 https://us-cert.cisa.gov/ics/advisories/icsa-20-343-08

🔗 https://www.openwall.com/lists/oss-security/2018/12/10/5

相关漏洞威胁

CVE-2009-038810.0

Multiple integer signedness errors in (1) UltraVNC 1.0.2 and 1.0.5 and (2) TightVnc 1.3.9 allow remote VNC servers to cause a deni...

CVE-2019-156799.8

TightVNC code version 1.3.10 contains heap buffer overflow in InitialiseRFBConnection function, which can potentially result code ...

CVE-2021-427859.8

Buffer Overflow vulnerability in tvnviewer.exe of TightVNC Viewer allows a remote attacker to execute arbitrary instructions via a...

CVE-2019-156789.8

TightVNC code version 1.3.10 contains heap buffer overflow in rfbServerCutText handler, which can potentially result code executio...