CVE-2008-0610: Buffer Overflow
Stack-based buffer overflow in the ClientConnection::NegotiateProtocolVersion function in vncviewer/ClientConnection.cpp in vncviewer for UltraVNC 1.0.2 and 1.0.4 before 01252008, when in LISTENING mode or when using the DSM plugin, allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a modified size value.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0610?
CVE-2008-0610 is classified as a medium severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2008-0610?
To fix CVE-2008-0610, upgrade UltraVNC to a version released after January 25, 2008.
What versions of UltraVNC are affected by CVE-2008-0610?
CVE-2008-0610 affects UltraVNC versions 1.0.2 and 1.0.4, including various release candidates.
Can CVE-2008-0610 be exploited remotely?
Yes, CVE-2008-0610 can be exploited remotely, allowing attackers to execute arbitrary code.
What is the attack vector for CVE-2008-0610?
The attack vector for CVE-2008-0610 is through the LISTENING mode or when using the DSM plugin in UltraVNC.