CVEvulnerability
CVE-2019-8287
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2019-10-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-120
Description
TightVNC code version 1.3.10 contains global buffer overflow in HandleCoRREBBP macro function, which can potentially result code execution. This attack appear to be exploitable via network connectivity.
Affected configurations
• tightvnc tightvnc 1.3.10
Related
Weakness · CWE (1)
- CWE-120 Buffer Copy without Checking Size of Input weakness
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-478893.pdf cert-portal.siemens.com
- https://lists.debian.org/debian-lts-announce/2019/12/msg00028.html lists.debian.org
- https://us-cert.cisa.gov/ics/advisories/icsa-20-343-08 us-cert.cisa.gov
- https://www.openwall.com/lists/oss-security/2018/12/10/5 Mailing List, Third Party Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-478893.pdf cert-portal.siemens.com
- https://lists.debian.org/debian-lts-announce/2019/12/msg00028.html lists.debian.org
- https://us-cert.cisa.gov/ics/advisories/icsa-20-343-08 us-cert.cisa.gov
- https://www.openwall.com/lists/oss-security/2018/12/10/5 Mailing List, Third Party Advisory