Secunia

Some vulnerabilities have been reported in UltraVNC, which can potentially be exploited by malicious people to compromise a user's system.

The vulnerabilities are caused due to multiple boundary errors within the vncviewer/FileTransfer.cpp file. These can be exploited to cause stack-based buffer overflows by e.g. sending specially crafted data to a vncviewer in "LISTENING" mode or by tricking a user into connecting to a malicious VNC server.

Successful exploitation may allow execution of arbitrary code.

This may also be exploited if a DSM plugin is used, but requires that the attacker owns the encryption key used by vncviewer.

The vulnerability is reported in version 102 and in release candidates of version 1.0.4 prior to February 4th, 2008.

Solution
Apply updated version.
Further details available in Customer Area

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available in Customer Area

Original Advisory
http://forum.ultravnc.info/viewtopic.php?p=45150#45150

Deep Links
Links available in Customer Area