CVE-2019-8280

概要

参考情報

• cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf
• cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf
• cert-portal.siemens.com/productcert/pdf/ssa-940818.pdf
• ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-009-ultravnc-access-of-memory-location-after-end-of-buffer · Third Party Advisory
• us-cert.cisa.gov/ics/advisories/icsa-21-131-11
• us-cert.gov/ics/advisories/icsa-20-161-06

ultravnc のその他の脆弱性

• CVE-2026-7840緊急 9.8UltraVNC repeater through 1.8.2.2 contains a global buffer overflow in its embedded HTTP administration server. The functions wi_senderr() a…
• CVE-2026-7839緊急 9.1UltraVNC repeater through 1.8.2.2 initializes the HTTP administration server with a hardcoded default password. In repeater/webgui/settings.…
• CVE-2026-7838高 8.8UltraVNC viewer through 1.8.2.2 contains an integer overflow leading to a heap buffer overflow in the RFB protocol failure-response parsing …
• CVE-2026-7831高 7.6UltraVNC viewer through 1.8.2.2 contains an off-by-one stack buffer overflow in the RFB ServerInit message handler. In vncviewer/ClientConne…
• CVE-2026-7830高 7.4UltraVNC through 1.8.2.2 uses inadequate cryptography in the MS-Logon II authentication scheme (rfbUltraVNC_MsLogonIIAuth). In rfb/dh.cpp th…