Vulnerabilities 22
-
Unscored —
UltraVNC revision 1198 has a buffer underflow vulnerability in VNC client code, which can potentially result in code ex…
-
Unscored —
UltraVNC revision 1198 has a heap buffer overflow vulnerability in VNC client code which results code execution. This a…
-
Unscored —
UltraVNC revision 1198 contains multiple memory leaks (CWE-655) in VNC client code, which allow an attacker to read sta…
-
Unscored —
UltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC client RRE decoder code, caused by multiplication …
-
Unscored —
UltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC code inside client CoRRE decoder, caused by multip…
-
Unscored —
UltraVNC revision 1203 has multiple heap buffer overflow vulnerabilities in VNC client code inside Ultra decoder, which…
-
Unscored —
UltraVNC revision 1205 has stack-based buffer overflow vulnerability in VNC client code inside ShowConnInfo routine, wh…
-
Unscored —
UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside Ultra2 decoder, which can potentiall…
-
Unscored —
UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of SETPIXELS mac…
-
Unscored —
UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of ClientConnect…
-
Unscored —
UltraVNC revision 1207 has out-of-bounds read vulnerability in VNC client code inside TextChat module, which results in…
-
Unscored —
UltraVNC revision 1206 has multiple off-by-one vulnerabilities in VNC client code connected with improper usage of Clie…
-
Unscored —
UltraVNC revision 1206 has stack-based Buffer overflow vulnerability in VNC client code inside FileTransfer module, whi…
-
Unscored —
UltraVNC revision 1210 has out-of-bounds read vulnerability in VNC client code inside Ultra decoder, which results in a…
-
Unscored —
UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer handler, which …
-
Unscored —
UltraVNC revision 1211 has multiple off-by-one vulnerabilities in VNC server code, which can potentially result in code…
-
Unscored —
UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer request handler…
-
Unscored —
UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer offer handler, …
-
Unscored —
UltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code, which result in out-o…
-
Unscored —
UltraVNC revision 1211 has a stack buffer overflow vulnerability in VNC server code inside file transfer request handle…
-
Unscored —
UltraVNC revision 1211 contains multiple memory leaks (CWE-665) in VNC server code, which allows an attacker to read st…
-
Unscored —
UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside RAW decoder, which can potentially r…
Revision history
-
#1
Publication Date
References
-
SSA-927095: UltraVNC Vulnerabilities in SINUMERIK Products - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-927095.html
-
ICS Advisory ICSA-20-161-06 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-20-161-06
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B