CVE-2019-8287: Buffer Overflow
Published Oct 29, 2019
·Updated
TightVNC code version 1.3.10 contains global buffer overflow in HandleCoRREBBP macro function, which can potentially result code execution. This attack appear to be exploitable via network connectivity.
Affected Software
1 affected component
TightVNC TightVnc=1.3.10
Event History
Oct 29, 2019
CVE Published
via MITRE·04:43 PM
Data Sourced
via MITRE·04:43 PM
DescriptionWeakness
May 11, 2024
Data Sourced
via ICS·01:35 AM
SeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this advisory?
The vulnerability ID for this advisory is CVE-2019-8287.
2
What is the severity of CVE-2019-8287?
CVE-2019-8287 has a severity rating of critical.
3
What is the affected software version of CVE-2019-8287?
CVE-2019-8287 affects TightVNC version 1.3.10.
4
How can this vulnerability be exploited?
This vulnerability can be exploited through network connectivity.
5
Are there any references for CVE-2019-8287?
Yes, you can find references for CVE-2019-8287 at the following links: - [Siemens CERT Portal](https://cert-portal.siemens.com/productcert/pdf/ssa-478893.pdf) - [Debian LTS Announce](https://lists.debian.org/debian-lts-announce/2019/12/msg00028.html) - [US-CERT Advisory](https://us-cert.cisa.gov/ics/advisories/icsa-20-343-08)