Summary
Multiple TightVNC (V1.x) vulnerabilities could allow remote code execution and Denial-of-Service attacks under certain conditions.
Siemens has previously released this advisory containing a set of products that were considered to be affected. Through Siemens' continuous investigation processes it was identified that all products previously advised are not affected by any vulnerability listed in this advisory.
Vulnerabilities 4
-
Unscored —CVE-2019-15678 EPSS 13%
TightVNC code version 1.3.10 contains heap buffer overflow in rfbServerCutText handler, which can potentially result co…
-
Unscored —CVE-2019-15679 EPSS 12%
TightVNC code version 1.3.10 contains heap buffer overflow in InitialiseRFBConnection function, which can potentially r…
-
Unscored —
TightVNC code version 1.3.10 contains null pointer dereference in HandleZlibBPP function, which results Denial of Syste…
-
Unscored —CVE-2019-8287 EPSS 19%
TightVNC code version 1.3.10 contains global buffer overflow in HandleCoRREBBP macro function, which can potentially re…
Revision history
-
#2
Errata - Revoked advisory
-
#1
Publication Date
References
-
SSA-478893: TightVNC Vulnerabilities in Industrial Products (Revoked) - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-478893.pdf
-
SSA-478893: TightVNC Vulnerabilities in Industrial Products (Revoked) - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-478893.txt