Test ID:	1.3.6.1.4.1.25623.1.0.800131
Category:	Denial of Service
Title:	UltraVNC VNCViewer Multiple Buffer Overflow Vulnerabilities (Nov 2008)
Summary:	UltraVNC VNCViewer is prone to a buffer overflow vulnerability.
Description:	Summary: UltraVNC VNCViewer is prone to a buffer overflow vulnerability. Vulnerability Insight: The flaw is due to multiple boundary errors within the vncviewer/FileTransfer.cpp file, while processing malformed data. Vulnerability Impact: Successful exploitation allows attackers to execute arbitrary code by tricking a user into connecting to a malicious VNC server or by sending specially crafted data to a vncviewer in LISTENING mode and can even cause denial of service condition. Affected Software/OS: UltraVNC VNCViewer Version 1.0.2 and 1.0.4 before RC11 on Windows (Any). Solution: Update to version 1.0.4 RC11 or later. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-5001 BugTraq ID: 27687 http://www.securityfocus.com/bid/27687 http://secunia.com/advisories/28804 http://www.vupen.com/english/advisories/2008/0486
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.