CVE-2019-8269CWE-121

CVE-2019-8269: vulnerability in Kaspersky Lab UltraVNC

Published 09 Mar 2019 · Updated 17 Sep 2024

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 5.7%

UltraVNC revision 1206 has stack-based Buffer overflow vulnerability in VNC client code inside FileTransfer module, which leads to a denial of service (DoS) condition. This attack appear to be exploitable via network connectivity. This vulnerability has been fixed in revision 1207.

Affected products

Kaspersky Lab · UltraVNC

Related CVEs — Kaspersky Lab UltraVNC

In the same product, most dangerous first.

CVE-2019-8274—CVE-2019-8274EPSS 8.3%CVE-2019-8271—CVE-2019-8271EPSS 8.3%CVE-2019-8273—CVE-2019-8273EPSS 8.3%CVE-2019-8276—CVE-2019-8276EPSS 5.7%CVE-2019-8280—CVE-2019-8280EPSS 4.2%CVE-2019-8275—CVE-2019-8275EPSS 4.0%

References

https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-016-ultravnc-stack-based-buffer-overflow/https://www.us-cert.gov/ics/advisories/icsa-20-161-06