CVE-2008-4770 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2008-4770
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-4770

Description: The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0 through 4.1.2, Enterprise Edition E4.0 through E4.4.2, and Personal Edition P4.0 through P4.4.2 allows remote VNC servers to execute arbitrary code via crafted RFB protocol data, related to "encoding type."

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/47937 http://xforce.iss.net/xforce/xfdb/45969 SUNALERT http://sunsolve.sun.com/search/document.do?assetkey=1-26-248526-1 SAID Secunia Advisory: SA33689 Secunia Advisory: SA34184 Secunia Advisory: SA32317 REDHAT http://www.redhat.com/support/errata/RHSA-2009-0261.html MLIST http://www.realvnc.com/pipermail/vnc-list/2008-November/059432.html GENTOO http://www.gentoo.org/security/en/glsa/glsa-200903-17.xml FEDORA CONFIRM http://www.realvnc.com/products/upgrade.html http://www.realvnc.com/products/free/4.1/release-notes.html http://sunsolve.sun.com/search/document.do?assetkey=1-21-140455-01-1 BID 33263 31832

Return to the previous page.