Vulnerabilities in UltraVNC
7 resultsVexday analysis
UltraVNC apresenta um perfil de risco moderado com 6 vulnerabilidades catalogadas, nenhuma delas em exploração ativa conhecida ou classificada como crítica. A fraqueza dominante identificada é CWE-122 (buffer overflow), típica de software legado, sem registros recentes de divulgação, sugerindo que a superfície de ataque atual não está sob pressão imediata.
CVE-2019-8262—UltraVNC revision 1203 has multiple heap buffer overflow vulnerabilities in VNC client code inside Ultra decoder, which results in code execEPSS 4.8%CVE-2019-8258—UltraVNC revision 1198 has a heap buffer overflow vulnerability in VNC client code which results code execution. This attack appears to be eEPSS 4.4%CVE-2019-8259—UltraVNC revision 1198 contains multiple memory leaks (CWE-655) in VNC client code, which allow an attacker to read stack memory and can be EPSS 3.0%CVE-2018-15361—UltraVNC revision 1198 has a buffer underflow vulnerability in VNC client code, which can potentially result in code execution. This attack EPSS 2.9%CVE-2019-8260—UltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC client RRE decoder code, caused by multiplication overflow. This attackEPSS 2.3%CVE-2019-8261—UltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC code inside client CoRRE decoder, caused by multiplication overflow. ThEPSS 2.2%CVE-2022-24750HIGHLow privilege user is able to exploit the service and gain SYSTEM privileges in UltraVNC serverEPSS 0.3%