CVE-2008-5001: Buffer Overflow
Multiple stack-based buffer overflows in multiple functions in vncviewer/FileTransfer.cpp in vncviewer for UltraVNC 1.0.2 and 1.0.4 before 01252008, when in LISTENING mode or when using the DSM plugin, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified parameters, a different issue than CVE-2008-0610.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5001?
CVE-2008-5001 is classified as a high severity vulnerability due to its potential to cause a denial of service and execute arbitrary code.
How do I fix CVE-2008-5001?
To mitigate CVE-2008-5001, upgrade to UltraVNC versions later than 1.0.4 or 1.0.2 released after January 25, 2008.
What versions of UltraVNC are affected by CVE-2008-5001?
UltraVNC versions 1.0.2 and 1.0.4 prior to January 25, 2008, are affected by CVE-2008-5001.
What types of attacks can exploit CVE-2008-5001?
CVE-2008-5001 can be exploited by remote attackers causing a crash or possibly executing arbitrary code on the affected system.
In what modes is CVE-2008-5001 exploitable?
The vulnerability CVE-2008-5001 is exploitable when vncviewer is in LISTENING mode or when using the DSM plugin.