CVE-2019-8277CWE-665

CVE-2019-8277: vulnerability in Kaspersky Lab UltraVNC

Published · Updated

Follow this CVE+ Monitor UltraVNC

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 3.0%
UltraVNC revision 1211 contains multiple memory leaks (CWE-665) in VNC server code, which allows an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212.
Affected products
Kaspersky Lab · UltraVNC
Related CVEs — Kaspersky Lab UltraVNC

In the same product, most dangerous first.

CVE-2019-8271—CVE-2019-8271EPSS 8.3%CVE-2019-8274—CVE-2019-8274EPSS 8.3%CVE-2019-8273—CVE-2019-8273EPSS 8.3%CVE-2019-8276—CVE-2019-8276EPSS 5.7%CVE-2019-8269—CVE-2019-8269EPSS 5.7%CVE-2019-8280—CVE-2019-8280EPSS 4.2%