CVE-2019-8271

UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer handler, which can potentially result code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1212.
Configurations

Configuration 1 (hide)

cpe:2.3:a:uvnc:ultravnc:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:siemens:sinumerik_access_mymachine\/p2p:*:*:*:*:*:*:*:*
cpe:2.3:a:siemens:sinumerik_pcu_base_win10_software\/ipc:*:*:*:*:*:*:*:*
cpe:2.3:a:siemens:sinumerik_pcu_base_win7_software\/ipc:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2019-03-08 23:29

Updated : 2024-02-28 17:08


NVD link : CVE-2019-8271

Mitre link : CVE-2019-8271

CVE.ORG link : CVE-2019-8271


JSON object : View

Products Affected

siemens

  • sinumerik_pcu_base_win7_software\/ipc
  • sinumerik_access_mymachine\/p2p
  • sinumerik_pcu_base_win10_software\/ipc

uvnc

  • ultravnc
CWE
CWE-787

Out-of-bounds Write

CWE-122

Heap-based Buffer Overflow