Published: 16/01/2009 Updated: 29/09/2017

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 890

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0 up to and including 4.1.2, Enterprise Edition E4.0 through E4.4.2, and Personal Edition P4.0 through P4.4.2 allows remote VNC servers to execute arbitrary code via crafted RFB protocol data, related to "encoding type."

Vulnerable Product	Search on Vulmon	Subscribe to Product
realvnc realvnc p4.4.2
realvnc realvnc p4.0
realvnc realvnc 4.4.2
realvnc realvnc 4.1.2
realvnc realvnc e4.0
realvnc realvnc 4.0

Synopsis Moderate: vnc security update Type/Severity Security Advisory: Moderate Topic Updated vnc packages to correct a security issue are now available for RedHat Enterprise Linux 3, 4, and 5This update has been rated as having moderate security impact by the RedHat Security Response Team Descr ...

Debian Bug report logs - #513531 CVE-2008-4770: Arbitrary code execution via crafted RFB protocol data Package: xvnc4viewer; Maintainer for xvnc4viewer is Ola Lundqvist <opal@debianorg>; Source for xvnc4viewer is src:vnc4 (PTS, buildd, popcon) Reported by: Steffen Joeris <steffenjoeris@skolelinuxde> Date: Thu, 29 ...

It was discovered that xvnc4viewer, a virtual network computing client software for X, is prone to an integer overflow via a malicious encoding value that could lead to arbitrary code execution For the stable distribution (etch) this problem has been fixed in version 411+X430-21+etch1 For the unstable (sid) distribution this problem has been ...

CWE-20 http://sunsolve.sun.com/search/document.do?assetkey=1-26-248526-1 http://sunsolve.sun.com/search/document.do?assetkey=1-21-140455-01-1 http://www.realvnc.com/products/upgrade.html http://www.realvnc.com/pipermail/vnc-list/2008-November/059432.html http://www.securityfocus.com/bid/33263 https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01025.html http://secunia.com/advisories/33689 http://www.redhat.com/support/errata/RHSA-2009-0261.html http://www.gentoo.org/security/en/glsa/glsa-200903-17.xml http://secunia.com/advisories/34184 http://secunia.com/advisories/32317 http://www.vupen.com/english/advisories/2008/2868 http://www.realvnc.com/products/free/4.1/release-notes.html http://www.securityfocus.com/bid/31832 https://exchange.xforce.ibmcloud.com/vulnerabilities/47937 https://exchange.xforce.ibmcloud.com/vulnerabilities/45969 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9367 https://access.redhat.com/errata/RHSA-2009:0261 https://www.debian.org/security/./dsa-1716 https://nvd.nist.gov

CVE-2008-4770

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect