CVE-2019-8259CWE-665

UltraVNC revision 1198 contains multiple memory leaks (CWE-655) in VNC client code, which allow an attacker to read stack memory and can be abused for…

published March 5, 2019

CVSS
—
EPSS
3%
Percentile
87.3
In the wild
Unconfirmed
What it is

UltraVNC revision 1198 contains multiple memory leaks (CWE-655) in VNC client code, which allow an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1199.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03009 · 87.3th percentile
Weakness
CWE-665 · Improper Initialization
Published
2019-03-05T15:00Z
EPSS history
Timeline
  • 05 MAR 15:00Z
    UltraVNC revision 1198 contains multiple memory leaks (CWE-655) in VNC client code, which allow an attacker to read stack memory and can be abused for…
    cvelistv5