Back to Database
Status published
Critical
CVE-2019-8261
UltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC...
Vulnerability Description
UltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC code inside client CoRRE decoder, caused by multiplication overflow. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1200.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-8261
Credits & Attribution
No credits recorded in the NVD database.
References
- https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-007-ultravnc-out-of-bound-read/
- https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf
- https://www.us-cert.gov/ics/advisories/icsa-20-161-06
- https://cert-portal.siemens.com/productcert/pdf/ssa-940818.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf
- https://us-cert.cisa.gov/ics/advisories/icsa-21-131-11
More from UltraVNC
View All →CVE-2019-8262
UltraVNC revision 1203 has multiple heap buffer overflow vulnerabilities in...
Critical
9.8
CVE-2019-8260
UltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC...
Critical
9.8
CVE-2019-8259
UltraVNC revision 1198 contains multiple memory leaks (CWE-655) in VNC...
High
7.5
CVE-2019-8258
UltraVNC revision 1198 has a heap buffer overflow vulnerability in...
Critical
9.8
CVE-2018-15361
UltraVNC revision 1198 has a buffer underflow vulnerability in VNC...
Critical
9.8
Affected Vendor
UltraVNC
View all reports →Affected Software
UltraVNC
Vulnerable Versions:
1.2.2.3
Timeline
Official Publish:
March 5th, 2019
Last Modified:
September 17th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H