CVE-2008-0610: ultravnc

EPSS trend

Probability

38.76%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 38.76% on 19-09-2026

19-09-202619-10-2026

EPSS score

38.76%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databaseremotewindowsVerified
UltraVNC 1.0.2 Client - 'vncviewer.exe' Remote Buffer Overflow (Metasploit)
Maturity: weaponized
MetasploitremoteUnverified
UltraVNC 1.0.2 Client (vncviewer.exe) Buffer Overflow
exploit/windows/vnc/ultravnc_viewer_bof
Maturity: poc

References

9 links

sourceforge.net/project/shownotes.php?release_id=571174&group_id=63887X Refsource CONFIRM
www.securityfocus.com/bid/27561VDB EntryX Refsource BIDExploitPatch
www.kb.cert.org/vuls/id/721460Third Party AdvisoryX Refsource CERT VNUS Government Resource
secunia.com/advisories/28747Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
forum.ultravnc.info/viewtopic.php?t=11850X Refsource CONFIRM
ultravnc.svn.sourceforge.net/viewvc/…X Refsource CONFIRM
www.exploit-db.com/exploits/18666ExploitX Refsource EXPLOIT DB
www.securitytracker.com/id?1019293VDB EntryX Refsource SECTRACK
www.vupen.com/english/advisories/2008/0392VDB EntryX Refsource VUPEN

Related vulnerabilities

CVE-2018-15361ultravncultravnc+12.88%7y ago05-03-2019 15:00UltraVNC revision 1198 has a buffer underflow vulnerability in VNC client code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1199.CVE-2008-5001ultravncultravnc5.59%17y ago10-11-2008 11:00Multiple stack-based buffer overflows in multiple functions in vncviewer/FileTransfer.cpp in vncviewer for UltraVNC 1.0.2 and 1.0.4 before 01252008, when in LISTENING mode or when using the DSM plugin, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified parameters, a different issue than CVE-2008-0610.CVE-2022-24750ultravncultravnc+10.27%4y ago10-03-2022 00:00UltraVNC is a free and open source remote pc access software. A vulnerability has been found in versions prior to 1.3.8.0 in which the DSM plugin module, which allows a local authenticated user to achieve local privilege escalation (LPE) on a vulnerable system. The vulnerability has been fixed to allow loading of plugins from the installed directory. Affected users should upgrade their UltraVNC to 1.3.8.1. Users unable to upgrade should not install and run UltraVNC server as a service. It is advisable to create a scheduled task on a low privilege account to launch WinVNC.exe instead. There are no known workarounds if winvnc needs to be started as a service.CVE-2010-5248ultravncultravnc0.40%14y ago07-09-2012 10:00Untrusted search path vulnerability in UltraVNC 1.0.8.2 allows local users to gain privileges via a Trojan horse vnclang.dll file in the current working directory, as demonstrated by a directory that contains a .vnc file. NOTE: some of these details are obtained from third party information.CVE-2009-0388tightvnctightvnc+113.33%17y ago04-02-2009 19:00Multiple integer signedness errors in (1) UltraVNC 1.0.2 and 1.0.5 and (2) TightVnc 1.3.9 allow remote VNC servers to cause a denial of service (heap corruption and application crash) or possibly execute arbitrary code via a large length value in a message, related to the (a) ClientConnection::CheckBufferSize and (b) ClientConnection::CheckFileZipBufferSize functions in ClientConnection.cpp.CVE-2019-8258siemenssinumerik_access_mymachine\/p2p+44.43%7y ago05-03-2019 15:00UltraVNC revision 1198 has a heap buffer overflow vulnerability in VNC client code which results code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1199.

All vulnerabilities inultravnc

CVE-2008-0610: ultravnc

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References