Back to Database
Status published
Critical
CVE-2019-8262
UltraVNC revision 1203 has multiple heap buffer overflow vulnerabilities in...
Vulnerability Description
UltraVNC revision 1203 has multiple heap buffer overflow vulnerabilities in VNC client code inside Ultra decoder, which results in code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1204.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-8262
Credits & Attribution
No credits recorded in the NVD database.
References
- https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-008-ultravnc-heap-based-buffer-overflow/
- https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf
- https://www.us-cert.gov/ics/advisories/icsa-20-161-06
- https://cert-portal.siemens.com/productcert/pdf/ssa-940818.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf
- https://us-cert.cisa.gov/ics/advisories/icsa-21-131-11
More from UltraVNC
View All →CVE-2019-8261
UltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC...
Critical
9.8
CVE-2019-8260
UltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC...
Critical
9.8
CVE-2019-8259
UltraVNC revision 1198 contains multiple memory leaks (CWE-655) in VNC...
High
7.5
CVE-2019-8258
UltraVNC revision 1198 has a heap buffer overflow vulnerability in...
Critical
9.8
CVE-2018-15361
UltraVNC revision 1198 has a buffer underflow vulnerability in VNC...
Critical
9.8
Affected Vendor
UltraVNC
View all reports →Affected Software
UltraVNC
Vulnerable Versions:
1.2.2.3
Timeline
Official Publish:
March 5th, 2019
Last Modified:
September 16th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H