GCVE - cpe:2.3:a:kaspersky_lab:ultravnc:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:kaspersky_lab:ultravnc:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Kaspersky Lab (`b5f4462b-8575-5828-a714-cab051c30fb5`)
Product	Ultravnc (`4b0e00fe-8885-576e-b66c-ff6c3465a632`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-8280`	vulnerable	2026-06-08 05:14:23.800596	Details available UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside RAW decoder, which can potentially result code execution. This attack appear to be exploitable via network connectivity. This vulnerability has been fixed in revision 1204. Published: 2019-03-09T00:00:00.000Z Updated: 2024-09-17T01:40:44.392Z Open on db.gcve.eu Reference links https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-009-ultravnc-access-of-memory-location-after-end-of-buffer/ https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf https://www.us-cert.gov/ics/advisories/icsa-20-161-06 https://cert-portal.siemens.com/productcert/pdf/ssa-940818.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-8277`	vulnerable	2026-06-08 05:14:23.790898	Details available UltraVNC revision 1211 contains multiple memory leaks (CWE-665) in VNC server code, which allows an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212. Published: 2019-03-09T00:00:00.000Z Updated: 2024-08-04T21:17:30.165Z Open on db.gcve.eu Reference links https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-024-ultravnc-improper-initialization/ https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf https://www.us-cert.gov/ics/advisories/icsa-20-161-06 https://cert-portal.siemens.com/productcert/pdf/ssa-940818.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-8276`	vulnerable	2026-06-08 05:14:23.790046	Details available UltraVNC revision 1211 has a stack buffer overflow vulnerability in VNC server code inside file transfer request handler, which can result in Denial of Service (DoS). This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1212. Published: 2019-03-09T00:00:00.000Z Updated: 2024-09-16T18:33:31.486Z Open on db.gcve.eu Reference links https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-023-ultravnc-stack-based-buffer-overflow/ https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf https://www.us-cert.gov/ics/advisories/icsa-20-161-06	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-8275`	vulnerable	2026-06-08 05:14:23.789646	Details available UltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code, which result in out-of-bound data being accessed by remote users. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212. Published: 2019-03-09T00:00:00.000Z Updated: 2024-09-17T03:12:37.776Z Open on db.gcve.eu Reference links https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-022-ultravnc-improper-null-termination/ https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf https://www.us-cert.gov/ics/advisories/icsa-20-161-06 https://cert-portal.siemens.com/productcert/pdf/ssa-940818.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-8274`	vulnerable	2026-06-08 05:14:23.789192	Details available UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer offer handler, which can potentially in result code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1212. Published: 2019-03-09T00:00:00.000Z Updated: 2024-09-16T19:35:36.652Z Open on db.gcve.eu Reference links https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-021-ultravnc-heap-based-buffer-overflow/ https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf https://www.us-cert.gov/ics/advisories/icsa-20-161-06	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-8273`	vulnerable	2026-06-08 05:14:23.788538	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-8272`	vulnerable	2026-06-08 05:14:23.788045	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-8271`	vulnerable	2026-06-08 05:14:23.787635	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-8270`	vulnerable	2026-06-08 05:14:23.787206	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-8269`	vulnerable	2026-06-08 05:14:23.786632	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-8268`	vulnerable	2026-06-08 05:14:23.786006	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-8267`	vulnerable	2026-06-08 05:14:23.785564	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-8266`	vulnerable	2026-06-08 05:14:23.785164	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-8265`	vulnerable	2026-06-08 05:14:23.784734	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-8264`	vulnerable	2026-06-08 05:14:23.784350	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-8263`	vulnerable	2026-06-08 05:14:23.783526	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.