CVE-2019-8277

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

UltraVNC revision 1211 contains multiple memory leaks (CWE-665) in VNC server code, which allows an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-665

Affected software

Vendor	Product	Versions
Kaspersky Lab	UltraVNC	revision 1211

References

https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdfThird Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-940818.pdf
https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-024-ultravnc-improper-initialization/Third Party Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-131-11
https://www.us-cert.gov/ics/advisories/icsa-20-161-06Third Party Advisory, US Government Resource
https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdfThird Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-940818.pdf
https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-024-ultravnc-improper-initialization/Third Party Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-131-11
https://www.us-cert.gov/ics/advisories/icsa-20-161-06Third Party Advisory, US Government Resource

Timeline

Published: Mar 8, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-82786.1Stored XSS in Invision Power Board versions 3.3.1 - 3.4.8 leads to Remote Code Execution.CVE-2019-82795.4Multiple stored XSS in Vanilla Forums before 2.5 allow remote attackers to inject arbitrary JavaScript code into any message on forum.CVE-2019-82809.8UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside RAW decoder, which can potentially result code execution.CVE-2019-82825.3Gemalto Admin Control Center, all versions prior to 7.92, uses cleartext HTTP to communicate with www3.safenet-inc.com to obtain language pa CVE-2019-82836.5Hasplm cookie in Gemalto Admin Control Center, all versions prior to 7.92, does not have 'HttpOnly' flag. This allows malicious javascript t CVE-2019-82858.8Kaspersky Lab Antivirus Engine version before 04.apr.2019 has a heap-based buffer overflow vulnerability that potentially allow arbitrary co CVE-2019-82864.3Information Disclosure in Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security versions up to 2019 could potentially CVE-2019-82879.8TightVNC code version 1.3.10 contains global buffer overflow in HandleCoRREBBP macro function, which can potentially result code execution. CVE-2019-82885.4Vulnerability in Online Store v1.0, Stored XSS in user_view.php where adidas_member_user variable is not sanitized.CVE-2019-82895.4Vulnerability in Online Store v1.0, stored XSS in admin/user_view.php adidas_member_email variable CVE-2019-82906.1Vulnerability in Online Store v1.0, The registration form requirements for the member email format can be bypassed by posting directly to se CVE-2019-82917.5Online Store System v1.0 delete_file.php doesn't check to see if a user has administrative rights nor does it check for path traversal.