CVE-2019-15679: Buffer Overflow
Published Oct 29, 2019
·Updated
TightVNC code version 1.3.10 contains heap buffer overflow in InitialiseRFBConnection function, which can potentially result code execution. This attack appear to be exploitable via network connectivity.
Affected Software
1 affected component
TightVNC TightVnc=1.3.10
Event History
Oct 29, 2019
CVE Published
via MITRE·04:45 PM
Data Sourced
via MITRE·04:45 PM
DescriptionWeakness
May 11, 2024
Data Sourced
via ICS·01:35 AM
SeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2019-15679.
2
What is the severity of CVE-2019-15679?
CVE-2019-15679 has a severity rating of critical (9.8).
3
What is the affected software of CVE-2019-15679?
The affected software is TightVNC version 1.3.10.
4
How can CVE-2019-15679 be exploited?
CVE-2019-15679 can be exploited through network connectivity.
5
Are there any references for CVE-2019-15679?
Yes, you can find references for CVE-2019-15679 in the following links: - [Siemens ProductCERT](https://cert-portal.siemens.com/productcert/pdf/ssa-478893.pdf) - [Debian LTS](https://lists.debian.org/debian-lts-announce/2019/12/msg00028.html) - [US-CERT](https://us-cert.cisa.gov/ics/advisories/icsa-20-343-08)