Back to Database
Status published
Critical
CVE-2019-8272
UltraVNC revision 1211 has multiple off-by-one vulnerabilities in VNC server...
Vulnerability Description
UltraVNC revision 1211 has multiple off-by-one vulnerabilities in VNC server code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-8272
Credits & Attribution
No credits recorded in the NVD database.
References
More from Kaspersky Lab
View All →CVE-2019-8280
UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client...
Critical
9.8
CVE-2019-8279
Multiple stored XSS in Vanilla Forums before 2.5 allow remote...
Medium
5.4
CVE-2019-8278
Stored XSS in Invision Power Board versions 3.3.1 - 3.4.8...
Medium
6.1
CVE-2019-8277
UltraVNC revision 1211 contains multiple memory leaks (CWE-665) in VNC...
High
7.5
CVE-2019-8276
UltraVNC revision 1211 has a stack buffer overflow vulnerability in...
High
7.5
Affected Vendor
Kaspersky Lab
View all reports →Affected Software
UltraVNC
Vulnerable Versions:
1.2.2.3
Timeline
Official Publish:
March 9th, 2019
Last Modified:
September 16th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.