CVE-2008-4770 The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0 through 4.1.2, Enterprise Edition E4.0 through E4.4.2, and Personal Edition P4.0 through P4.4.2 allows rem...
HighCVSS 10.0
EPSS 4.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0 through 4.1.2, Enterprise Edition E4.0 through E4.4.2, and Personal Edition P4.0 through P4.4.2 allows remote VNC servers to execute arbitrary code via crafted RFB protocol data, related to "encoding type."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| realvnc | = 4.0 | No fix listed |
| realvnc | = 4.1.2 | No fix listed |
| realvnc | = 4.4.2 | No fix listed |
| realvnc | = e4.0 | No fix listed |
| realvnc | = p4.0 | No fix listed |
| realvnc | = p4.4.2 | No fix listed |
| debian/vnc4(Debian:10) | < 4.1.1+X4.3.0-31 | 4.1.1+X4.3.0-31 |
References
- 32317 third-party-advisory vendor-advisory
- 33689 third-party-advisory vendor-advisory
- 34184 third-party-advisory vendor-advisory
- sunsolve.sun.com patch vendor-advisory
- 248526 vendor-advisory
- GLSA-200903-17 vendor-advisory
- [vnc-list] 20081126 VNC Viewer Vulnerability CVE-2008-4770 mailing-list
- www.realvnc.com
- www.realvnc.com vendor-advisory
- RHSA-2009:0261 vendor-advisory
- 31832 vdb-entry
- 33263 vdb-entry
- ADV-2008-2868 vdb-entry vendor-advisory
- realvnc-cmsgreader-code-execution(45969) vdb-entry
- realvnc-rfb-protocol-code-execution(47937) vdb-entry
- oval:org.mitre.oval:def:9367 signature vdb-entry
- FEDORA-2009-1001 vendor-advisory