Executive Summary

Informations
Name CVE-2008-0610 First vendor Publication 2008-02-06
Vendor Cve Last vendor Modification 2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score 9.3 Attack Range Network
Cvss Impact Score 10 Attack Complexity Medium
Cvss Expoit Score 8.6 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Stack-based buffer overflow in the ClientConnection::NegotiateProtocolVersion function in vncviewer/ClientConnection.cpp in vncviewer for UltraVNC 1.0.2 and 1.0.4 before 01252008, when in LISTENING mode or when using the DSM plugin, allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a modified size value.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0610

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-119 Failure to Constrain Operations within the Bounds of a Memory Buffer

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 5

Open Source Vulnerability Database (OSVDB)

Id Description
42840 UltraVNC vncviewer/ClientConnection.cpp ClientConnection::NegotiateProtocolVe...

Snort® IPS/IDS

Date Description
2014-01-10 UltraVNC Listening mode stack buffer overflow attempt
RuleID : 26455 - Revision : 3 - Type : SERVER-OTHER
2014-01-10 UltraVNC Listening mode stack buffer overflow attempt
RuleID : 26454 - Revision : 3 - Type : SERVER-OTHER

Sources (Detail)

http://forum.ultravnc.info/viewtopic.php?t=11850
http://secunia.com/advisories/28747
http://sourceforge.net/project/shownotes.php?release_id=571174&group_id=6...
http://ultravnc.svn.sourceforge.net/viewvc/ultravnc/UltraVNC%20Project%20Root...
http://www.exploit-db.com/exploits/18666
http://www.kb.cert.org/vuls/id/721460
http://www.securityfocus.com/bid/27561
http://www.securitytracker.com/id?1019293
http://www.vupen.com/english/advisories/2008/0392
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
Date Informations
2024-11-28 23:15:10
  • Multiple Updates
2024-11-28 12:14:48
  • Multiple Updates
2021-05-04 12:07:04
  • Multiple Updates
2021-04-22 01:07:31
  • Multiple Updates
2020-05-23 13:16:50
  • Multiple Updates
2020-05-23 00:21:13
  • Multiple Updates
2016-04-26 17:05:36
  • Multiple Updates
2014-01-19 21:24:47
  • Multiple Updates
2013-05-11 00:08:36
  • Multiple Updates