UltraVNC Viewer < Multiple Integer Overflows

High Nessus Plugin ID 35608


The remote Windows host has an application that is affected by multiple integer overflows.


The installed version of UltraVNC Viewer is earlier than Such versions reportedly miscalculate a buffer size on the heap. If an attacker can trick a user on the remote host into connecting to a malicious server, he can probably exploit this issue using specially crafted messages to execute code on the affected host subject to the user's privileges.


Upgrade to UltraVNC or later.

See Also




Plugin Details

Severity: High

ID: 35608

File Name: ultravnc_1_0_5_4.nasl

Version: $Revision: 1.8 $

Type: local

Agent: windows

Family: Windows

Published: 2009/02/06

Modified: 2015/01/12

Dependencies: 10456, 13855

Risk Information

Risk Factor: High


Base Score: 9.3

Temporal Score: 7.7

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:F/RL:OF/RC:C

Vulnerability Information

Required KB Items: SMB/Registry/Enumerated

Exploit Available: true

Exploit Ease: Exploits are available

Exploitable With

Core Impact

Reference Information

CVE: CVE-2009-0388

BID: 33568

OSVDB: 55422

CWE: 189