exploits , vulnerabilities , articles , Multiple VNC Clients Multiple Integer Overflow Vulnerabilities

Title	Multiple VNC Clients Multiple Integer Overflow Vulnerabilities
Published	2009-02-03-12:00AM
Updated	2009-02-05-12:19AM
Class	Boundary Condition Error
CVE	CVE-2009-0388
Remote	Yes
Local	No
Credit	Ariel Futoransky, Fernando Russ and Alfredo Ortega from Core Security Technologies
Vulnerable	UltraVNC UltraVNC 1.0.5 UltraVNC UltraVNC 1.0.2 UltraVNC UltraVNC 104 RC8 UltraVNC UltraVNC 104 RC7 UltraVNC UltraVNC 104 RC6 TightVNC TightVNC 1.3.9 TightVNC TightVNC 1.2.9 TightVNC TightVNC 1.2.7 TightVNC TightVNC 1.2.6 TightVNC TightVNC 1.2.5 MandrakeSoft Linux Mandrake 9.0 TightVNC TightVNC 1.2.4 TightVNC TightVNC 1.2.3 TightVNC TightVNC 1.2.2 TightVNC TightVNC 1.2.1 TightVNC TightVNC 1.2 .0 Avaya Labs Libsafe 1.2.5 Avaya Labs Libsafe 1.2.4 Avaya Labs Libsafe 1.2.3 Avaya Labs Libsafe 1.2.2
Not Vulnerable	UltraVNC UltraVNC 1.0.5 4 TightVNC TightVNC 1.3.10
Code	An attacker may exploit these issues by enticing a victim into connecting to a malicious server.Details are available on modifying the VNC server source code to serve as a proof of concept; please see the references for more information.
TXT

Vulnerabilities - newest 10 RSS | More

• 2009-12-17 Mozilla Firefox CVE-2009-3979 Multiple Remote Memory Corruption Vulnerabilities
• 2009-12-17 Mozilla Firefox CVE-2009-3981 Remote Memory Corruption Vulnerability
• 2009-12-17 Drupal Sections Module HTML Injection Vulnerability
• 2009-12-17 Mozilla Firefox and SeaMonkey Theora Video Library Remote Integer Overflow Vulnerability
• 2009-12-17 Mozilla Firefox and Sea Monkey Insecure Protocol Location Bar Spoofing Vulnerability
• 2009-12-17 Mozilla Firefox and Sea Monkey Content Injection Spoofing Vulnerability
• 2009-12-17 Mozilla Firefox/SeaMonkey GeckoActiveXObject Exception Message COM Object Enumeration Vulnerability
• 2009-12-16 ZABBIX Denial Of Service and SQL Injection Vulnerabilities
• 2009-12-16 IBM WebSphere Application Server JNDI Remote Information Disclosure Vulnerability
• 2009-12-16 Horde Application Framework Administration Interface Cross-Site Scripting Vulnerability

• Vulnerabilities
• Exploits
• News
• Articles

Copyright 2007, SecurityDot
Thu, 17 Dec 2009 15:14:05 +0000