Multiple stack-based buffer overflows in multiple functions in vncviewer/FileTransfer.cpp in vncviewer for UltraVNC 1.0.2 and 1.0.4 before…

Description

Multiple stack-based buffer overflows in multiple functions in vncviewer/FileTransfer.cpp in vncviewer for UltraVNC 1.0.2 and 1.0.4 before 01252008, when in LISTENING mode or when using the DSM plugin, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified parameters, a different issue than CVE-2008-0610.

Scores

EPSS (exploitation in 30 days)

5.6% · top 7.1% of all CVEs (5 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 9.3.

Weakness

• n/a
• CWE-119 (opens in a new tab)All about CWE-119 and its CVEs

Affected products

• n/a

  • affected n/a

References (6)

• 27687 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• http://sourceforge.net/project/shownotes.php?release_id=571174&group_id=63887 (opens in a new tab)x_refsource_CONFIRMx_transferred
• ADV-2008-0486 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• http://ultravnc.svn.sourceforge.net/viewvc/ultravnc/UltraVNC%20Project%20Root/UltraVNC/vncviewer/FileTransfer.cpp?view=log#rev183 (opens in a new tab)x_refsource_CONFIRMx_transferred
• http://forum.ultravnc.info/viewtopic.php?p=45150#45150 (opens in a new tab)x_refsource_CONFIRMx_transferred
• 28804 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2008-5001](https://trackcve.app/badge/CVE-2008-5001.svg)](https://trackcve.app/cve/CVE-2008-5001)

Record last updated 7 Aug 2024, 10:40 UTC.