CVE-2008-4770

Description

The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0 through 4.1.2, Enterprise Edition E4.0 through E4.4.2, and Personal Edition P4.0 through P4.4.2 allows remote VNC servers to execute arbitrary code via crafted RFB protocol data, related to "encoding type."

References

https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01025.html

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9367

https://exchange.xforce.ibmcloud.com/vulnerabilities/47937

https://exchange.xforce.ibmcloud.com/vulnerabilities/45969

http://www.vupen.com/english/advisories/2008/2868

http://www.securityfocus.com/bid/33263

http://www.securityfocus.com/bid/31832

http://www.redhat.com/support/errata/RHSA-2009-0261.html

http://www.realvnc.com/products/upgrade.html

http://www.realvnc.com/products/free/4.1/release-notes.html

http://www.realvnc.com/pipermail/vnc-list/2008-November/059432.html

http://www.gentoo.org/security/en/glsa/glsa-200903-17.xml

http://sunsolve.sun.com/search/document.do?assetkey=1-26-248526-1

http://sunsolve.sun.com/search/document.do?assetkey=1-21-140455-01-1

http://secunia.com/advisories/34184

http://secunia.com/advisories/33689

http://secunia.com/advisories/32317

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3