1. Home
  2. CVE Database
  3. CVE-2018-15361
CRITICAL · 9.8

CVE-2018-15361

UltraVNC revision 1198 has a buffer underflow vulnerability in VNC client code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. This vul...

Vulnerability Description

UltraVNC revision 1198 has a buffer underflow vulnerability in VNC client code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1199.

CVSS Score

9.8

CRITICAL

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
UvncUltravnc< 1.2.2.3

Related Weaknesses (CWE)

CWE-787CWE-124

References

FAQ

What is CVE-2018-15361?

CVE-2018-15361 is a vulnerability with a CVSS score of 9.8 (CRITICAL). UltraVNC revision 1198 has a buffer underflow vulnerability in VNC client code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. This vul...

How severe is CVE-2018-15361?

CVE-2018-15361 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2018-15361?

Check the references section above for vendor advisories and patch information. Affected products include: Uvnc Ultravnc.