Approved changes feed: RSS · Atom

cpe:2.3:a:ultravnc:ultravnc:1.0.2:*:*:*:*:*:*:*

part: a version: 1.0.2 update: *

VendorUltravnc (ade05f0b-4581-5953-bd7f-af85bab9d65d)
ProductUltravnc (ec222d0f-d6ff-5268-8b41-3d60b04f6ac4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/ultravnc/ultravnc purl2cpe 2026-06-01 10:11:23.299238
pkg:sourceforge/ultravnc purl2cpe 2026-06-01 10:11:23.299240

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-0388 vulnerable 2026-06-08 04:51:09.224536 Details available
Multiple integer signedness errors in (1) UltraVNC 1.0.2 and 1.0.5 and (2) TightVnc 1.3.9 allow remote VNC servers to cause a denial of service (heap corruption and application crash) or possibly execute arbitrary code via a large length value in a message, related to the (a) ClientConnection::CheckBufferSize and (b) ClientConnection::CheckFileZipBufferSize functions in ClientConnection.cpp.
Published: 2009-02-04T19:00:00.000Z
Updated: 2024-08-07T04:31:25.854Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5001 vulnerable 2026-06-08 04:50:48.807242 Details available
Multiple stack-based buffer overflows in multiple functions in vncviewer/FileTransfer.cpp in vncviewer for UltraVNC 1.0.2 and 1.0.4 before 01252008, when in LISTENING mode or when using the DSM plugin, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified parameters, a different issue than CVE-2008-0610.
Published: 2008-11-10T11:00:00.000Z
Updated: 2024-08-07T10:40:16.863Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0610 vulnerable 2026-06-08 04:50:17.308179 Details available
Stack-based buffer overflow in the ClientConnection::NegotiateProtocolVersion function in vncviewer/ClientConnection.cpp in vncviewer for UltraVNC 1.0.2 and 1.0.4 before 01252008, when in LISTENING mode or when using the DSM plugin, allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a modified size value.
Published: 2008-02-06T11:00:00.000Z
Updated: 2024-08-07T07:54:22.414Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.