NVD

Id
4584  
Name
CVE-2008-4770  
Description
The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0 through 4.1.2, Enterprise Edition E4.0 through E4.4.2, and Personal Edition P4.0 through P4.4.2 allows remote VNC servers to execute arbitrary code via crafted RFB protocol data, related to "encoding type."  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2009-01-16  
Modified Date
2010-08-21  
Seq
2008-4770  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
28735 4584 CVE-2008-4770 oval:org.mitre.oval:def:9367  View
28736 4584 CVE-2008-4770 http://sunsolve.sun.com/search/document.do?assetkey=1-21-140455-01-1  View
28737 4584 CVE-2008-4770 248526  View
28738 4584 CVE-2008-4770 GLSA-200903-17  View
28739 4584 CVE-2008-4770 [vnc-list] 20081126 VNC Viewer Vulnerability CVE-2008-4770  View
28740 4584 CVE-2008-4770 http://www.realvnc.com/products/free/4.1/release-notes.html  View
28741 4584 CVE-2008-4770 http://www.realvnc.com/products/upgrade.html  View
28742 4584 CVE-2008-4770 RHSA-2009:0261  View
28743 4584 CVE-2008-4770 31832  View
28744 4584 CVE-2008-4770 33263  View
28745 4584 CVE-2008-4770 ADV-2008-2868  View
28746 4584 CVE-2008-4770 realvnc-cmsgreader-code-execution(45969)  View
28747 4584 CVE-2008-4770 realvnc-rfb-protocol-code-execution(47937)  View
28748 4584 CVE-2008-4770 FEDORA-2009-1001  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40018 JVNDB-2009-001024 RealVNC VNC Viewer コンポーネントにおける任意のコードを実行される脆弱性 RealVNC の VNC Viewer コンポーネントにおける CMsgReader::readRect 関数には、RFB プロトコルデータの処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2008-4770 34883 CVE-2008-4770 4584 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001024.html 2009-01-16 2010-05-20 View