Back to Database
Status published
Critical
CVE-2008-4770
The CMsgReader::readRect function in the VNC Viewer component in RealVNC...
Vulnerability Description
The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0 through 4.1.2, Enterprise Edition E4.0 through E4.4.2, and Personal Edition P4.0 through P4.4.2 allows remote VNC servers to execute arbitrary code via crafted RFB protocol data, related to "encoding type."
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-4770
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.gentoo.org/security/en/glsa/glsa-200903-17.xml
- http://www.realvnc.com/products/upgrade.html
- https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01025.html
- http://www.realvnc.com/products/free/4.1/release-notes.html
- http://secunia.com/advisories/33689
- http://secunia.com/advisories/34184
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-140455-01-1
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-248526-1
- http://www.securityfocus.com/bid/31832
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45969
- http://www.securityfocus.com/bid/33263
- http://secunia.com/advisories/32317
- http://www.vupen.com/english/advisories/2008/2868
- http://www.realvnc.com/pipermail/vnc-list/2008-November/059432.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47937
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9367
- http://www.redhat.com/support/errata/RHSA-2009-0261.html
More from realvnc
View All →CVE-2022-41975
RealVNC VNC Server before 6.11.0 and VNC Viewer before 6.22.826...
Unknown
0
CVE-2022-27502
RealVNC VNC Server 6.9.0 through 5.1.0 for Windows allows local...
High
7.8
CVE-2021-41380
RealVNC Viewer 6.21.406 allows remote VNC servers to cause a...
Medium
6.5
CVE-2013-6886
RealVNC VNC 5.0.6 on Mac OS X, Linux, and UNIX...
High
7.2
CVE-2008-3493
vncviewer.exe in RealVNC Windows Client 4.1.2.0 allows remote VNC servers...
Medium
5
Affected Vendor
realvnc
View all reports →Affected Software
realvnc
Vulnerable Versions:
4.0, 4.1.2, 4.4.2, e4.0, p4.0, p4.4.2
Timeline
Official Publish:
January 16th, 2009
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.