CVE-2019-8275

UltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code, which result in out-of-bound data being accessed by remote users. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212.

Date published : 2019-03-08

https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf

https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf