CVEvulnerability
CVE-2008-5001
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-11-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Multiple stack-based buffer overflows in multiple functions in vncviewer/FileTransfer.cpp in vncviewer for UltraVNC 1.0.2 and 1.0.4 before 01252008, when in LISTENING mode or when using the DSM plugin, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified parameters, a different issue than CVE-2008-0610.
Affected configurations
• ultravnc ultravnc 1.0.2
• ultravnc ultravnc 1.0.4
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://forum.ultravnc.info/viewtopic.php?p=45150#45150 Vendor Advisory
- http://secunia.com/advisories/28804 Vendor Advisory
- http://sourceforge.net/project/shownotes.php?release_id=571174&group_id=63887 sourceforge.net
- http://ultravnc.svn.sourceforge.net/viewvc/ultravnc/UltraVNC%20Project%20Root/UltraVNC/vncviewer/FileTransfer.cpp?view=log#rev183 ultravnc.svn.sourceforge.net
- http://www.securityfocus.com/bid/27687 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/0486 www.vupen.com
- http://forum.ultravnc.info/viewtopic.php?p=45150#45150 Vendor Advisory
- http://secunia.com/advisories/28804 Vendor Advisory
- http://sourceforge.net/project/shownotes.php?release_id=571174&group_id=63887 sourceforge.net
- http://ultravnc.svn.sourceforge.net/viewvc/ultravnc/UltraVNC%20Project%20Root/UltraVNC/vncviewer/FileTransfer.cpp?view=log#rev183 ultravnc.svn.sourceforge.net
- http://www.securityfocus.com/bid/27687 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/0486 www.vupen.com