CVE-2009-0388

Related Files

TightVNC Integer Overflow

Posted Feb 9, 2009

Authored by desi

TightVNC authentication failure integer overflow proof of concept exploit.

tags | exploit, overflow, proof of concept

advisories | CVE-2009-0388

SHA-256 | fb3617c0ee5bb4ab0800a6dc9463dca271c9d0bf61093a6168e02ceb442140f6

Download | Favorite | View

Core Security Technologies Advisory 2008.1009

Posted Feb 3, 2009

Authored by Core Security Technologies | Site coresecurity.com

Core Security Technologies Advisory - Multiple integer overflow vulnerabilities have been discovered in UltraVNC and TightVNC, two (open source) remote control applications derived from the popular VNC software. The vulnerabilities cause a miscalculation of a buffer size on the heap, allowing an attacker to corrupt a VNC client heap and can probably allow code execution (exploitation is very likely). Affected packages include UltraVNC versions 1.0.2, 1.0.5, and TightVNC version 1.3.9.

tags | advisory, remote, overflow, vulnerability, code execution

advisories | CVE-2009-0388

SHA-256 | 27ab44936ddd8eacf7dda098842026d7f58dc3335367e99f73723c3a8cc516dd

Download | Favorite | View