KLCERT-19-015: UltraVNC Off-by-one Error

Main
Advisories
KLCERT-19-015: UltraVNC Off-by-one Error

01 March 2019

Vendor

UltraVNC

CVE-IDS

2019-8268
KLCERT

KLCERT-19-015

Timeline

Kaspersky ICS CERT advisory published

01 March 2019
Vendor releases patch

February 2019
Vulnerabilities reported

January 2019

Description

UltraVNC revision 1206 has multiple off-by-one vulnerabilities in VNC client code connected with improper usage of ClientConnection::ReadString function, which can potentially result code execution. This attack appear to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1207.

CVSS v3

0.0

(CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)

Exploitability

Remotely

Attack complexity

Low

User interaction

None

Impact

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code.

Existence of exploit

Unknown

Affected products

UltraVNC before 1.2.2.3

Mitigation

Vendor mitigation

Update UltraVNC to revision 1207.

Kaspersky Lab publishes information on newly identified vulnerabilities in order to raise user awareness of the IT security threats detected. Kaspersky Lab does not make any guarantees in respect of information received from vendors of products in which vulnerabilities have been identified, which is included in the following sections of the advisory: Affected Products, Vendor Mitigation.

Timeline

Kaspersky ICS CERT advisory published

01 March 2019
Vendor releases patch

February 2019
Vulnerabilities reported

January 2019