Critical severity · published Mar 8, 2019
CVE-2019-8264
UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside Ultra2 decoder, which can potentially result in code execution
9.8
CVSS
3.1%
EPSS
No
On KEV
Description
UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside Ultra2 decoder, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1204.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.1% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UL
UltraVNC · Kaspersky Lab
1.2.2.3 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-8264
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-8264
cert-portal.siemens.com
https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf
cert-portal.siemens.com
https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf
cert-portal.siemens.com
https://cert-portal.siemens.com/productcert/pdf/ssa-940818.pdf
Third Party Advisory
https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-011-ultravnc-access-of-memory-location-after-end-of-buffer/
us-cert.cisa.gov
https://us-cert.cisa.gov/ics/advisories/icsa-21-131-11
www.us-cert.gov
https://www.us-cert.gov/ics/advisories/icsa-20-161-06
More from UltraVNC
9.8
CVE-2019-8280
UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside RAW decoder, which can potentially result code execution
9.8
CVE-2019-8275
UltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code, which result in out-of-bound data being accessed by remote users
9.8
CVE-2019-8274
UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer offer handler, which can potentially in result code execution
9.8
CVE-2019-8273
UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer request handler, which can potentially result in code execution
9.8
CVE-2019-8272
UltraVNC revision 1211 has multiple off-by-one vulnerabilities in VNC server code, which can potentially result in code execution