fkie_cve-2008-4770
Vulnerability from fkie_nvd
Published
2009-01-16 21:30
Modified
2025-04-09 00:30
Severity ?
Summary
The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0 through 4.1.2, Enterprise Edition E4.0 through E4.4.2, and Personal Edition P4.0 through P4.4.2 allows remote VNC servers to execute arbitrary code via crafted RFB protocol data, related to "encoding type."
References
cve@mitre.orghttp://secunia.com/advisories/32317
cve@mitre.orghttp://secunia.com/advisories/33689
cve@mitre.orghttp://secunia.com/advisories/34184
cve@mitre.orghttp://sunsolve.sun.com/search/document.do?assetkey=1-21-140455-01-1Patch, Vendor Advisory
cve@mitre.orghttp://sunsolve.sun.com/search/document.do?assetkey=1-26-248526-1Vendor Advisory
cve@mitre.orghttp://www.gentoo.org/security/en/glsa/glsa-200903-17.xml
cve@mitre.orghttp://www.realvnc.com/pipermail/vnc-list/2008-November/059432.html
cve@mitre.orghttp://www.realvnc.com/products/free/4.1/release-notes.html
cve@mitre.orghttp://www.realvnc.com/products/upgrade.htmlVendor Advisory
cve@mitre.orghttp://www.redhat.com/support/errata/RHSA-2009-0261.html
cve@mitre.orghttp://www.securityfocus.com/bid/31832
cve@mitre.orghttp://www.securityfocus.com/bid/33263
cve@mitre.orghttp://www.vupen.com/english/advisories/2008/2868
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/45969
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/47937
cve@mitre.orghttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9367
cve@mitre.orghttps://www.redhat.com/archives/fedora-package-announce/2009-January/msg01025.html
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/32317
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/33689
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/34184
af854a3a-2127-422b-91ae-364da2661108http://sunsolve.sun.com/search/document.do?assetkey=1-21-140455-01-1Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://sunsolve.sun.com/search/document.do?assetkey=1-26-248526-1Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.gentoo.org/security/en/glsa/glsa-200903-17.xml
af854a3a-2127-422b-91ae-364da2661108http://www.realvnc.com/pipermail/vnc-list/2008-November/059432.html
af854a3a-2127-422b-91ae-364da2661108http://www.realvnc.com/products/free/4.1/release-notes.html
af854a3a-2127-422b-91ae-364da2661108http://www.realvnc.com/products/upgrade.htmlVendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.redhat.com/support/errata/RHSA-2009-0261.html
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/31832
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/33263
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2008/2868
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/45969
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/47937
af854a3a-2127-422b-91ae-364da2661108https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9367
af854a3a-2127-422b-91ae-364da2661108https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01025.html
Impacted products
Vendor Product Version
realvnc realvnc 4.0
realvnc realvnc 4.1.2
realvnc realvnc 4.4.2
realvnc realvnc e4.0
realvnc realvnc p4.0
realvnc realvnc p4.4.2


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:realvnc:realvnc:4.0:*:free:*:*:*:*:*",
              "matchCriteriaId": "D33C48F6-27C1-4AA4-A027-71E06E31B53F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:realvnc:realvnc:4.1.2:*:free:*:*:*:*:*",
              "matchCriteriaId": "1D102EDC-3B06-4880-8A93-155562A2B209",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:realvnc:realvnc:4.4.2:*:enterprise:*:*:*:*:*",
              "matchCriteriaId": "80F206D4-09C2-478C-A429-C672B635EF10",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:realvnc:realvnc:e4.0:*:enterprise:*:*:*:*:*",
              "matchCriteriaId": "48BE82EC-F0F2-425C-A7DB-63EFF4A7702E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:realvnc:realvnc:p4.0:*:personal:*:*:*:*:*",
              "matchCriteriaId": "2785BEA3-4A77-4204-92D1-F66140302B2E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:realvnc:realvnc:p4.4.2:*:personal:*:*:*:*:*",
              "matchCriteriaId": "5140685C-E1CF-4B07-82DE-EAD311994E7B",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0 through 4.1.2, Enterprise Edition E4.0 through E4.4.2, and Personal Edition P4.0 through P4.4.2 allows remote VNC servers to execute arbitrary code via crafted RFB protocol data, related to \"encoding type.\""
    },
    {
      "lang": "es",
      "value": "La funci\u00f3n CMsgReader::readRect en el componente VNC Viewer en RealVNC VNC Free Edition v4.0 hasta v4.1.2, Enterprise Edition vE4.0 hasta vE4.4.2, y Personal Edition vP4.0 hasta vP4.4.2 permite a servidores remotos VNC ejecutar c\u00f3digo de su elecci\u00f3n mediante el protocolo de datos RFB manipulado, relacionado con \"tipo codificado\"."
    }
  ],
  "id": "CVE-2008-4770",
  "lastModified": "2025-04-09T00:30:58.490",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 10.0,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 10.0,
        "obtainAllPrivilege": true,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2009-01-16T21:30:03.327",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/32317"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/33689"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/34184"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140455-01-1"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-248526-1"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200903-17.xml"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.realvnc.com/pipermail/vnc-list/2008-November/059432.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.realvnc.com/products/free/4.1/release-notes.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.realvnc.com/products/upgrade.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.redhat.com/support/errata/RHSA-2009-0261.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/31832"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/33263"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2008/2868"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45969"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47937"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9367"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01025.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/32317"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/33689"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/34184"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140455-01-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-248526-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200903-17.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.realvnc.com/pipermail/vnc-list/2008-November/059432.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.realvnc.com/products/free/4.1/release-notes.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.realvnc.com/products/upgrade.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2009-0261.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/31832"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/33263"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2008/2868"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45969"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47937"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9367"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01025.html"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.