CVE-2008-4770
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 4.1%
The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0 through 4.1.2, Enterprise Edition E4.0 through E4.4.2, and Personal Edition P4.0 through P4.4.2 allows remote VNC servers to execute arbitrary code via crafted RFB protocol data, related to "encoding type."
Affected products
n/a · n/aReferences
http://secunia.com/advisories/32317http://secunia.com/advisories/33689http://secunia.com/advisories/34184https://exchange.xforce.ibmcloud.com/vulnerabilities/45969https://exchange.xforce.ibmcloud.com/vulnerabilities/47937https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9367http://sunsolve.sun.com/search/document.do?assetkey=1-21-140455-01-1http://sunsolve.sun.com/search/document.do?assetkey=1-26-248526-1https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01025.htmlhttp://www.gentoo.org/security/en/glsa/glsa-200903-17.xmlhttp://www.realvnc.com/pipermail/vnc-list/2008-November/059432.htmlhttp://www.realvnc.com/products/free/4.1/release-notes.html