CVE-2019-8277CWE-665

UltraVNC revision 1211 contains multiple memory leaks (CWE-665) in VNC server code, which allows an attacker to read stack memory and can be abused for…

published March 9, 2019

CVSS
—
EPSS
3%
Percentile
87.2
In the wild
Unconfirmed
What it is

UltraVNC revision 1211 contains multiple memory leaks (CWE-665) in VNC server code, which allows an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02974 · 87.2th percentile
Weakness
CWE-665 · Improper Initialization
Published
2019-03-09T00:00Z
EPSS history
Timeline
  • 09 MAR 00:00Z
    UltraVNC revision 1211 contains multiple memory leaks (CWE-665) in VNC server code, which allows an attacker to read stack memory and can be abused for…
    cvelistv5