Vulnerability-Lookup

CVE-2008-4770 (GCVE-0-2008-4770)

Vulnerability from cvelistv5 – Published: 2009-01-16 21:00 – Updated: 2024-08-07 10:31

Summary

The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0 through 4.1.2, Enterprise Edition E4.0 through E4.4.2, and Personal Edition P4.0 through P4.4.2 allows remote VNC servers to execute arbitrary code via crafted RFB protocol data, related to "encoding type."

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

17 references

URL	Tags
http://www.gentoo.org/security/en/glsa/glsa-20090…	vendor-advisoryx_refsource_GENTOO
http://www.realvnc.com/products/upgrade.html	x_refsource_CONFIRM
https://www.redhat.com/archives/fedora-package-an…	vendor-advisoryx_refsource_FEDORA
http://www.realvnc.com/products/free/4.1/release-…	x_refsource_CONFIRM
http://secunia.com/advisories/33689	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/34184	third-party-advisoryx_refsource_SECUNIA
http://sunsolve.sun.com/search/document.do?assetk…	x_refsource_CONFIRM
http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
http://www.securityfocus.com/bid/31832	vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.securityfocus.com/bid/33263	vdb-entryx_refsource_BID
http://secunia.com/advisories/32317	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2008/2868	vdb-entryx_refsource_VUPEN
http://www.realvnc.com/pipermail/vnc-list/2008-No…	mailing-listx_refsource_MLIST
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.redhat.com/support/errata/RHSA-2009-02…	vendor-advisoryx_refsource_REDHAT

Date Public

2008-11-26 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:31:27.148Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-200903-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200903-17.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.realvnc.com/products/upgrade.html"
          },
          {
            "name": "FEDORA-2009-1001",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01025.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.realvnc.com/products/free/4.1/release-notes.html"
          },
          {
            "name": "33689",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33689"
          },
          {
            "name": "34184",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34184"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140455-01-1"
          },
          {
            "name": "248526",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-248526-1"
          },
          {
            "name": "31832",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/31832"
          },
          {
            "name": "realvnc-cmsgreader-code-execution(45969)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45969"
          },
          {
            "name": "33263",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/33263"
          },
          {
            "name": "32317",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32317"
          },
          {
            "name": "ADV-2008-2868",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/2868"
          },
          {
            "name": "[vnc-list] 20081126 VNC Viewer Vulnerability CVE-2008-4770",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.realvnc.com/pipermail/vnc-list/2008-November/059432.html"
          },
          {
            "name": "realvnc-rfb-protocol-code-execution(47937)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47937"
          },
          {
            "name": "oval:org.mitre.oval:def:9367",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9367"
          },
          {
            "name": "RHSA-2009:0261",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0261.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-11-26T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0 through 4.1.2, Enterprise Edition E4.0 through E4.4.2, and Personal Edition P4.0 through P4.4.2 allows remote VNC servers to execute arbitrary code via crafted RFB protocol data, related to \"encoding type.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "GLSA-200903-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200903-17.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.realvnc.com/products/upgrade.html"
        },
        {
          "name": "FEDORA-2009-1001",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01025.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.realvnc.com/products/free/4.1/release-notes.html"
        },
        {
          "name": "33689",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33689"
        },
        {
          "name": "34184",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34184"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140455-01-1"
        },
        {
          "name": "248526",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-248526-1"
        },
        {
          "name": "31832",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/31832"
        },
        {
          "name": "realvnc-cmsgreader-code-execution(45969)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45969"
        },
        {
          "name": "33263",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/33263"
        },
        {
          "name": "32317",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32317"
        },
        {
          "name": "ADV-2008-2868",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/2868"
        },
        {
          "name": "[vnc-list] 20081126 VNC Viewer Vulnerability CVE-2008-4770",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.realvnc.com/pipermail/vnc-list/2008-November/059432.html"
        },
        {
          "name": "realvnc-rfb-protocol-code-execution(47937)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47937"
        },
        {
          "name": "oval:org.mitre.oval:def:9367",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9367"
        },
        {
          "name": "RHSA-2009:0261",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0261.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-4770",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0 through 4.1.2, Enterprise Edition E4.0 through E4.4.2, and Personal Edition P4.0 through P4.4.2 allows remote VNC servers to execute arbitrary code via crafted RFB protocol data, related to \"encoding type.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-200903-17",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200903-17.xml"
            },
            {
              "name": "http://www.realvnc.com/products/upgrade.html",
              "refsource": "CONFIRM",
              "url": "http://www.realvnc.com/products/upgrade.html"
            },
            {
              "name": "FEDORA-2009-1001",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01025.html"
            },
            {
              "name": "http://www.realvnc.com/products/free/4.1/release-notes.html",
              "refsource": "CONFIRM",
              "url": "http://www.realvnc.com/products/free/4.1/release-notes.html"
            },
            {
              "name": "33689",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33689"
            },
            {
              "name": "34184",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34184"
            },
            {
              "name": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140455-01-1",
              "refsource": "CONFIRM",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140455-01-1"
            },
            {
              "name": "248526",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-248526-1"
            },
            {
              "name": "31832",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/31832"
            },
            {
              "name": "realvnc-cmsgreader-code-execution(45969)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45969"
            },
            {
              "name": "33263",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/33263"
            },
            {
              "name": "32317",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32317"
            },
            {
              "name": "ADV-2008-2868",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/2868"
            },
            {
              "name": "[vnc-list] 20081126 VNC Viewer Vulnerability CVE-2008-4770",
              "refsource": "MLIST",
              "url": "http://www.realvnc.com/pipermail/vnc-list/2008-November/059432.html"
            },
            {
              "name": "realvnc-rfb-protocol-code-execution(47937)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47937"
            },
            {
              "name": "oval:org.mitre.oval:def:9367",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9367"
            },
            {
              "name": "RHSA-2009:0261",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0261.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-4770",
    "datePublished": "2009-01-16T21:00:00.000Z",
    "dateReserved": "2008-10-28T00:00:00.000Z",
    "dateUpdated": "2024-08-07T10:31:27.148Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2008-4770",
      "date": "2026-09-21",
      "epss": "0.04052",
      "percentile": "0.90218"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:realvnc:realvnc:4.0:*:free:*:*:*:*:*",
                  "matchCriteriaId": "D33C48F6-27C1-4AA4-A027-71E06E31B53F",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:realvnc:realvnc:4.1.2:*:free:*:*:*:*:*",
                  "matchCriteriaId": "1D102EDC-3B06-4880-8A93-155562A2B209",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:realvnc:realvnc:4.4.2:*:enterprise:*:*:*:*:*",
                  "matchCriteriaId": "80F206D4-09C2-478C-A429-C672B635EF10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:realvnc:realvnc:e4.0:*:enterprise:*:*:*:*:*",
                  "matchCriteriaId": "48BE82EC-F0F2-425C-A7DB-63EFF4A7702E",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:realvnc:realvnc:p4.0:*:personal:*:*:*:*:*",
                  "matchCriteriaId": "2785BEA3-4A77-4204-92D1-F66140302B2E",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:realvnc:realvnc:p4.4.2:*:personal:*:*:*:*:*",
                  "matchCriteriaId": "5140685C-E1CF-4B07-82DE-EAD311994E7B",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0 through 4.1.2, Enterprise Edition E4.0 through E4.4.2, and Personal Edition P4.0 through P4.4.2 allows remote VNC servers to execute arbitrary code via crafted RFB protocol data, related to \"encoding type.\""
        },
        {
          "lang": "es",
          "value": "La funci\u00f3n CMsgReader::readRect en el componente VNC Viewer en RealVNC VNC Free Edition v4.0 hasta v4.1.2, Enterprise Edition vE4.0 hasta vE4.4.2, y Personal Edition vP4.0 hasta vP4.4.2 permite a servidores remotos VNC ejecutar c\u00f3digo de su elecci\u00f3n mediante el protocolo de datos RFB manipulado, relacionado con \"tipo codificado\"."
        }
      ],
      "id": "CVE-2008-4770",
      "lastModified": "2024-11-21T00:52:31.097",
      "metrics": {
        "cvssMetricV2": [
          {
            "acInsufInfo": false,
            "baseSeverity": "HIGH",
            "cvssData": {
              "accessComplexity": "LOW",
              "accessVector": "NETWORK",
              "authentication": "NONE",
              "availabilityImpact": "COMPLETE",
              "baseScore": 10.0,
              "confidentialityImpact": "COMPLETE",
              "integrityImpact": "COMPLETE",
              "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
              "version": "2.0"
            },
            "exploitabilityScore": 10.0,
            "impactScore": 10.0,
            "obtainAllPrivilege": true,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "source": "nvd@nist.gov",
            "type": "Primary",
            "userInteractionRequired": false
          }
        ]
      },
      "published": "2009-01-16T21:30:03.327",
      "references": [
        {
          "source": "cve@mitre.org",
          "url": "http://secunia.com/advisories/32317"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://secunia.com/advisories/33689"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://secunia.com/advisories/34184"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Patch",
            "Vendor Advisory"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140455-01-1"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-248526-1"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200903-17.xml"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.realvnc.com/pipermail/vnc-list/2008-November/059432.html"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.realvnc.com/products/free/4.1/release-notes.html"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "http://www.realvnc.com/products/upgrade.html"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0261.html"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.securityfocus.com/bid/31832"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.securityfocus.com/bid/33263"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.vupen.com/english/advisories/2008/2868"
        },
        {
          "source": "cve@mitre.org",
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45969"
        },
        {
          "source": "cve@mitre.org",
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47937"
        },
        {
          "source": "cve@mitre.org",
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9367"
        },
        {
          "source": "cve@mitre.org",
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01025.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/32317"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/33689"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/34184"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Patch",
            "Vendor Advisory"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140455-01-1"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-248526-1"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200903-17.xml"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.realvnc.com/pipermail/vnc-list/2008-November/059432.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.realvnc.com/products/free/4.1/release-notes.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "http://www.realvnc.com/products/upgrade.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0261.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.securityfocus.com/bid/31832"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.securityfocus.com/bid/33263"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.vupen.com/english/advisories/2008/2868"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45969"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47937"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9367"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01025.html"
        }
      ],
      "sourceIdentifier": "cve@mitre.org",
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "CWE-20"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:realvnc:realvnc:4.0:*:free:*:*:*:*:*",
                    "matchCriteriaId": "D33C48F6-27C1-4AA4-A027-71E06E31B53F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:realvnc:realvnc:4.1.2:*:free:*:*:*:*:*",
                    "matchCriteriaId": "1D102EDC-3B06-4880-8A93-155562A2B209",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:realvnc:realvnc:4.4.2:*:enterprise:*:*:*:*:*",
                    "matchCriteriaId": "80F206D4-09C2-478C-A429-C672B635EF10",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:realvnc:realvnc:e4.0:*:enterprise:*:*:*:*:*",
                    "matchCriteriaId": "48BE82EC-F0F2-425C-A7DB-63EFF4A7702E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:realvnc:realvnc:p4.0:*:personal:*:*:*:*:*",
                    "matchCriteriaId": "2785BEA3-4A77-4204-92D1-F66140302B2E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:realvnc:realvnc:p4.4.2:*:personal:*:*:*:*:*",
                    "matchCriteriaId": "5140685C-E1CF-4B07-82DE-EAD311994E7B",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0 through 4.1.2, Enterprise Edition E4.0 through E4.4.2, and Personal Edition P4.0 through P4.4.2 allows remote VNC servers to execute arbitrary code via crafted RFB protocol data, related to \"encoding type.\""
          },
          {
            "lang": "es",
            "value": "La funci\u00f3n CMsgReader::readRect en el componente VNC Viewer en RealVNC VNC Free Edition v4.0 hasta v4.1.2, Enterprise Edition vE4.0 hasta vE4.4.2, y Personal Edition vP4.0 hasta vP4.4.2 permite a servidores remotos VNC ejecutar c\u00f3digo de su elecci\u00f3n mediante el protocolo de datos RFB manipulado, relacionado con \"tipo codificado\"."
          }
        ],
        "id": "CVE-2008-4770",
        "lastModified": "2026-04-23T00:35:47.467",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "HIGH",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "COMPLETE",
                "baseScore": 10.0,
                "confidentialityImpact": "COMPLETE",
                "integrityImpact": "COMPLETE",
                "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
                "version": "2.0"
              },
              "exploitabilityScore": 10.0,
              "impactScore": 10.0,
              "obtainAllPrivilege": true,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2009-01-16T21:30:03.327",
        "references": [
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/32317"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/33689"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/34184"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140455-01-1"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-248526-1"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200903-17.xml"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.realvnc.com/pipermail/vnc-list/2008-November/059432.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.realvnc.com/products/free/4.1/release-notes.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.realvnc.com/products/upgrade.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0261.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securityfocus.com/bid/31832"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securityfocus.com/bid/33263"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.vupen.com/english/advisories/2008/2868"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45969"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47937"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9367"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01025.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/32317"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/33689"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/34184"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140455-01-1"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-248526-1"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200903-17.xml"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.realvnc.com/pipermail/vnc-list/2008-November/059432.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.realvnc.com/products/free/4.1/release-notes.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.realvnc.com/products/upgrade.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0261.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/bid/31832"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/bid/33263"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.vupen.com/english/advisories/2008/2868"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45969"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47937"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9367"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01025.html"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-20"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2025-11-21T13:13:21+00:00",
      "cve": "CVE-2008-4770",
      "id": "CVE-2008-4770",
      "initial_release_date": "2008-11-26T00:00:00+00:00",
      "product_status:fixed": "184",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "vnc: vncviewer insufficient encoding value validation in CMsgReader::readRect",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2008/cve-2008-4770.json",
      "version": "3"
    }
  }
}

CERTA-2009-AVI-035

Vulnerability from certfr_avis - Published: - Updated:

Une vulnérabilité présente dans VNC Viewer permet à un utilisateur distant d'exécuter du code arbitraire.

Description

Une vulnérabilité est présente dans le client de bureau distant VNC Viewer. Celle-ci est relative à la mise en œuvre du protocole RFB dans VNC Viewer et uniquement dans cette partie cliente. La version serveur n'est pas affectée. L'exploitation de cette faille permet à un utilisateur distant malintentionné d'exécuter du code arbitraire par le biais d'un serveur VNC particulier.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

VNC Viewer versions 4.1.2 et antérieures.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

CERTA-2009-AVI-035

Vulnerability from certfr_avis - Published: - Updated:

Une vulnérabilité présente dans VNC Viewer permet à un utilisateur distant d'exécuter du code arbitraire.

Description

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

VNC Viewer versions 4.1.2 et antérieures.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

BDU:2015-02031 (CVE-2008-4770)

Vulnerability from fstec – Published: 2016-07-07 – Updated: 2024-07-05 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета xvnc4viewer операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно

Severity

10.0 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:C/I:C/A:C

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Software update

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2008-4770, DSA-1716, ID:1400472

References

2 references

URL
http://www.debian.org/security/dsa-1716/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4770

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 4 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 4: ppc: vnc4-common - 4.1.1+X4.3.0-21+etch1 xvnc4viewer - 4.1.1+X4.3.0-21+etch1 vnc4server - 4.1.1+X4.3.0-21+etch1 s390x: xvnc4viewer - 4.1.1+X4.3.0-21+etch1 vnc4-common - 4.1.1+X4.3.0-21+etch1 vnc4server - 4.1.1+X4.3.0-21+etch1 i686: vnc4server - 4.1.1+X4.3.0-21+etch1 vnc4-common - 4.1.1+X4.3.0-21+etch1 xvnc4viewer - 4.1.1+X4.3.0-21+etch1 sparc: xvnc4viewer - 4.1.1+X4.3.0-21+etch1 vnc4server - 4.1.1+X4.3.0-21+etch1 vnc4-common - 4.1.1+X4.3.0-21+etch1 x86-64: vnc4server - 4.1.1+X4.3.0-21+etch1 xvnc4viewer - 4.1.1+X4.3.0-21+etch1 vnc4-common - 4.1.1+X4.3.0-21+etch1 alpha: vnc4-common - 4.1.1+X4.3.0-21+etch1 xvnc4viewer - 4.1.1+X4.3.0-21+etch1 vnc4server - 4.1.1+X4.3.0-21+etch1 ia64: vnc4-common - 4.1.1+X4.3.0-21+etch1 xvnc4viewer - 4.1.1+X4.3.0-21+etch1 vnc4server - 4.1.1+X4.3.0-21+etch1 mips: xvnc4viewer - 4.1.1+X4.3.0-21+etch1 vnc4-common - 4.1.1+X4.3.0-21+etch1 vnc4server - 4.1.1+X4.3.0-21+etch1 mipsel: xvnc4viewer - 4.1.1+X4.3.0-21+etch1 vnc4-common - 4.1.1+X4.3.0-21+etch1 vnc4server - 4.1.1+X4.3.0-21+etch1 hppa: xvnc4viewer - 4.1.1+X4.3.0-21+etch1 vnc4server - 4.1.1+X4.3.0-21+etch1 vnc4-common - 4.1.1+X4.3.0-21+etch1

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 4 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 4:\n\tppc:\n\t\tvnc4-common - 4.1.1+X4.3.0-21+etch1\n\t\txvnc4viewer - 4.1.1+X4.3.0-21+etch1\n\t\tvnc4server - 4.1.1+X4.3.0-21+etch1\n\ts390x:\n\t\txvnc4viewer - 4.1.1+X4.3.0-21+etch1\n\t\tvnc4-common - 4.1.1+X4.3.0-21+etch1\n\t\tvnc4server - 4.1.1+X4.3.0-21+etch1\n\ti686:\n\t\tvnc4server - 4.1.1+X4.3.0-21+etch1\n\t\tvnc4-common - 4.1.1+X4.3.0-21+etch1\n\t\txvnc4viewer - 4.1.1+X4.3.0-21+etch1\n\tsparc:\n\t\txvnc4viewer - 4.1.1+X4.3.0-21+etch1\n\t\tvnc4server - 4.1.1+X4.3.0-21+etch1\n\t\tvnc4-common - 4.1.1+X4.3.0-21+etch1\n\tx86-64:\n\t\tvnc4server - 4.1.1+X4.3.0-21+etch1\n\t\txvnc4viewer - 4.1.1+X4.3.0-21+etch1\n\t\tvnc4-common - 4.1.1+X4.3.0-21+etch1\n\talpha:\n\t\tvnc4-common - 4.1.1+X4.3.0-21+etch1\n\t\txvnc4viewer - 4.1.1+X4.3.0-21+etch1\n\t\tvnc4server - 4.1.1+X4.3.0-21+etch1\n\tia64:\n\t\tvnc4-common - 4.1.1+X4.3.0-21+etch1\n\t\txvnc4viewer - 4.1.1+X4.3.0-21+etch1\n\t\tvnc4server - 4.1.1+X4.3.0-21+etch1\n\tmips:\n\t\txvnc4viewer - 4.1.1+X4.3.0-21+etch1\n\t\tvnc4-common - 4.1.1+X4.3.0-21+etch1\n\t\tvnc4server - 4.1.1+X4.3.0-21+etch1\n\tmipsel:\n\t\txvnc4viewer - 4.1.1+X4.3.0-21+etch1\n\t\tvnc4-common - 4.1.1+X4.3.0-21+etch1\n\t\tvnc4server - 4.1.1+X4.3.0-21+etch1\n\thppa:\n\t\txvnc4viewer - 4.1.1+X4.3.0-21+etch1\n\t\tvnc4server - 4.1.1+X4.3.0-21+etch1\n\t\tvnc4-common - 4.1.1+X4.3.0-21+etch1",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "16.01.2009",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "05.07.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "07.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-02031",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2008-4770, DSA-1716, ID:1400472",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 xvnc4viewer \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-1716/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4770",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 10)"
}

FKIE_CVE-2008-4770

Vulnerability from fkie_nvd - Published: 2009-01-16 21:30 - Updated: 2026-06-16 22:58

Severity

Summary

References

URL	Tags
cve@mitre.org	http://secunia.com/advisories/32317
cve@mitre.org	http://secunia.com/advisories/33689
cve@mitre.org	http://secunia.com/advisories/34184
cve@mitre.org	http://sunsolve.sun.com/search/document.do?assetkey=1-21-140455-01-1	Patch, Vendor Advisory
cve@mitre.org	http://sunsolve.sun.com/search/document.do?assetkey=1-26-248526-1	Vendor Advisory
cve@mitre.org	http://www.gentoo.org/security/en/glsa/glsa-200903-17.xml
cve@mitre.org	http://www.realvnc.com/pipermail/vnc-list/2008-November/059432.html
cve@mitre.org	http://www.realvnc.com/products/free/4.1/release-notes.html
cve@mitre.org	http://www.realvnc.com/products/upgrade.html	Vendor Advisory
cve@mitre.org	http://www.redhat.com/support/errata/RHSA-2009-0261.html
cve@mitre.org	http://www.securityfocus.com/bid/31832
cve@mitre.org	http://www.securityfocus.com/bid/33263
cve@mitre.org	http://www.vupen.com/english/advisories/2008/2868
cve@mitre.org	https://exchange.xforce.ibmcloud.com/vulnerabilities/45969
cve@mitre.org	https://exchange.xforce.ibmcloud.com/vulnerabilities/47937
cve@mitre.org	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9367
cve@mitre.org	https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01025.html
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/32317
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/33689
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/34184
af854a3a-2127-422b-91ae-364da2661108	http://sunsolve.sun.com/search/document.do?assetkey=1-21-140455-01-1	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://sunsolve.sun.com/search/document.do?assetkey=1-26-248526-1	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.gentoo.org/security/en/glsa/glsa-200903-17.xml
af854a3a-2127-422b-91ae-364da2661108	http://www.realvnc.com/pipermail/vnc-list/2008-November/059432.html
af854a3a-2127-422b-91ae-364da2661108	http://www.realvnc.com/products/free/4.1/release-notes.html
af854a3a-2127-422b-91ae-364da2661108	http://www.realvnc.com/products/upgrade.html	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.redhat.com/support/errata/RHSA-2009-0261.html
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/31832
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/33263
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2008/2868
af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/45969
af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/47937
af854a3a-2127-422b-91ae-364da2661108	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9367
af854a3a-2127-422b-91ae-364da2661108	https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01025.html

Impacted products

Vendor	Product	Version
realvnc	realvnc	4.0
realvnc	realvnc	4.1.2
realvnc	realvnc	4.4.2
realvnc	realvnc	e4.0
realvnc	realvnc	p4.0
realvnc	realvnc	p4.4.2

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:realvnc:realvnc:4.0:*:free:*:*:*:*:*",
              "matchCriteriaId": "D33C48F6-27C1-4AA4-A027-71E06E31B53F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:realvnc:realvnc:4.1.2:*:free:*:*:*:*:*",
              "matchCriteriaId": "1D102EDC-3B06-4880-8A93-155562A2B209",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:realvnc:realvnc:4.4.2:*:enterprise:*:*:*:*:*",
              "matchCriteriaId": "80F206D4-09C2-478C-A429-C672B635EF10",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:realvnc:realvnc:e4.0:*:enterprise:*:*:*:*:*",
              "matchCriteriaId": "48BE82EC-F0F2-425C-A7DB-63EFF4A7702E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:realvnc:realvnc:p4.0:*:personal:*:*:*:*:*",
              "matchCriteriaId": "2785BEA3-4A77-4204-92D1-F66140302B2E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:realvnc:realvnc:p4.4.2:*:personal:*:*:*:*:*",
              "matchCriteriaId": "5140685C-E1CF-4B07-82DE-EAD311994E7B",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0 through 4.1.2, Enterprise Edition E4.0 through E4.4.2, and Personal Edition P4.0 through P4.4.2 allows remote VNC servers to execute arbitrary code via crafted RFB protocol data, related to \"encoding type.\""
    },
    {
      "lang": "es",
      "value": "La funci\u00f3n CMsgReader::readRect en el componente VNC Viewer en RealVNC VNC Free Edition v4.0 hasta v4.1.2, Enterprise Edition vE4.0 hasta vE4.4.2, y Personal Edition vP4.0 hasta vP4.4.2 permite a servidores remotos VNC ejecutar c\u00f3digo de su elecci\u00f3n mediante el protocolo de datos RFB manipulado, relacionado con \"tipo codificado\"."
    }
  ],
  "id": "CVE-2008-4770",
  "lastModified": "2026-06-16T22:58:30.443",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 10.0,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 10.0,
        "obtainAllPrivilege": true,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2009-01-16T21:30:03.327",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/32317"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/33689"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/34184"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140455-01-1"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-248526-1"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200903-17.xml"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.realvnc.com/pipermail/vnc-list/2008-November/059432.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.realvnc.com/products/free/4.1/release-notes.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.realvnc.com/products/upgrade.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.redhat.com/support/errata/RHSA-2009-0261.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/31832"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/33263"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2008/2868"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45969"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47937"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9367"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01025.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/32317"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/33689"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/34184"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140455-01-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-248526-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200903-17.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.realvnc.com/pipermail/vnc-list/2008-November/059432.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.realvnc.com/products/free/4.1/release-notes.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.realvnc.com/products/upgrade.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2009-0261.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/31832"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/33263"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2008/2868"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45969"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47937"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9367"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01025.html"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-88J9-G2XV-54VP

Vulnerability from github – Published: 2022-05-17 00:46 – Updated: 2022-05-17 00:46

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2008-4770"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-20"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2009-01-16T21:30:00Z",
    "severity": "HIGH"
  },
  "details": "The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0 through 4.1.2, Enterprise Edition E4.0 through E4.4.2, and Personal Edition P4.0 through P4.4.2 allows remote VNC servers to execute arbitrary code via crafted RFB protocol data, related to \"encoding type.\"",
  "id": "GHSA-88j9-g2xv-54vp",
  "modified": "2022-05-17T00:46:25Z",
  "published": "2022-05-17T00:46:25Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-4770"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45969"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47937"
    },
    {
      "type": "WEB",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9367"
    },
    {
      "type": "WEB",
      "url": "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01025.html"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/32317"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/33689"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/34184"
    },
    {
      "type": "WEB",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140455-01-1"
    },
    {
      "type": "WEB",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-248526-1"
    },
    {
      "type": "WEB",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200903-17.xml"
    },
    {
      "type": "WEB",
      "url": "http://www.realvnc.com/pipermail/vnc-list/2008-November/059432.html"
    },
    {
      "type": "WEB",
      "url": "http://www.realvnc.com/products/free/4.1/release-notes.html"
    },
    {
      "type": "WEB",
      "url": "http://www.realvnc.com/products/upgrade.html"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2009-0261.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/31832"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/33263"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2008/2868"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2008-4770

Vulnerability from gsd - Updated: 2023-12-13 01:23

Details

Aliases

CVE-2008-4770

Aliases

CVE-2008-4770

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2008-4770",
    "description": "The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0 through 4.1.2, Enterprise Edition E4.0 through E4.4.2, and Personal Edition P4.0 through P4.4.2 allows remote VNC servers to execute arbitrary code via crafted RFB protocol data, related to \"encoding type.\"",
    "id": "GSD-2008-4770",
    "references": [
      "https://www.debian.org/security/2009/dsa-1716",
      "https://access.redhat.com/errata/RHSA-2009:0261",
      "https://linux.oracle.com/cve/CVE-2008-4770.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2008-4770"
      ],
      "details": "The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0 through 4.1.2, Enterprise Edition E4.0 through E4.4.2, and Personal Edition P4.0 through P4.4.2 allows remote VNC servers to execute arbitrary code via crafted RFB protocol data, related to \"encoding type.\"",
      "id": "GSD-2008-4770",
      "modified": "2023-12-13T01:23:00.144850Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2008-4770",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0 through 4.1.2, Enterprise Edition E4.0 through E4.4.2, and Personal Edition P4.0 through P4.4.2 allows remote VNC servers to execute arbitrary code via crafted RFB protocol data, related to \"encoding type.\""
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "GLSA-200903-17",
            "refsource": "GENTOO",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200903-17.xml"
          },
          {
            "name": "http://www.realvnc.com/products/upgrade.html",
            "refsource": "CONFIRM",
            "url": "http://www.realvnc.com/products/upgrade.html"
          },
          {
            "name": "FEDORA-2009-1001",
            "refsource": "FEDORA",
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01025.html"
          },
          {
            "name": "http://www.realvnc.com/products/free/4.1/release-notes.html",
            "refsource": "CONFIRM",
            "url": "http://www.realvnc.com/products/free/4.1/release-notes.html"
          },
          {
            "name": "33689",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/33689"
          },
          {
            "name": "34184",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/34184"
          },
          {
            "name": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140455-01-1",
            "refsource": "CONFIRM",
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140455-01-1"
          },
          {
            "name": "248526",
            "refsource": "SUNALERT",
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-248526-1"
          },
          {
            "name": "31832",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/31832"
          },
          {
            "name": "realvnc-cmsgreader-code-execution(45969)",
            "refsource": "XF",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45969"
          },
          {
            "name": "33263",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/33263"
          },
          {
            "name": "32317",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/32317"
          },
          {
            "name": "ADV-2008-2868",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2008/2868"
          },
          {
            "name": "[vnc-list] 20081126 VNC Viewer Vulnerability CVE-2008-4770",
            "refsource": "MLIST",
            "url": "http://www.realvnc.com/pipermail/vnc-list/2008-November/059432.html"
          },
          {
            "name": "realvnc-rfb-protocol-code-execution(47937)",
            "refsource": "XF",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47937"
          },
          {
            "name": "oval:org.mitre.oval:def:9367",
            "refsource": "OVAL",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9367"
          },
          {
            "name": "RHSA-2009:0261",
            "refsource": "REDHAT",
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0261.html"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:realvnc:realvnc:p4.4.2:*:personal:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:realvnc:realvnc:p4.0:*:personal:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:realvnc:realvnc:4.4.2:*:enterprise:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:realvnc:realvnc:4.1.2:*:free:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:realvnc:realvnc:e4.0:*:enterprise:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:realvnc:realvnc:4.0:*:free:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-4770"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0 through 4.1.2, Enterprise Edition E4.0 through E4.4.2, and Personal Edition P4.0 through P4.4.2 allows remote VNC servers to execute arbitrary code via crafted RFB protocol data, related to \"encoding type.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-20"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "248526",
              "refsource": "SUNALERT",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-248526-1"
            },
            {
              "name": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140455-01-1",
              "refsource": "CONFIRM",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-140455-01-1"
            },
            {
              "name": "http://www.realvnc.com/products/upgrade.html",
              "refsource": "CONFIRM",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://www.realvnc.com/products/upgrade.html"
            },
            {
              "name": "[vnc-list] 20081126 VNC Viewer Vulnerability CVE-2008-4770",
              "refsource": "MLIST",
              "tags": [],
              "url": "http://www.realvnc.com/pipermail/vnc-list/2008-November/059432.html"
            },
            {
              "name": "33263",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/33263"
            },
            {
              "name": "FEDORA-2009-1001",
              "refsource": "FEDORA",
              "tags": [],
              "url": "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01025.html"
            },
            {
              "name": "33689",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/33689"
            },
            {
              "name": "RHSA-2009:0261",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0261.html"
            },
            {
              "name": "GLSA-200903-17",
              "refsource": "GENTOO",
              "tags": [],
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200903-17.xml"
            },
            {
              "name": "34184",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/34184"
            },
            {
              "name": "32317",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/32317"
            },
            {
              "name": "ADV-2008-2868",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2008/2868"
            },
            {
              "name": "http://www.realvnc.com/products/free/4.1/release-notes.html",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://www.realvnc.com/products/free/4.1/release-notes.html"
            },
            {
              "name": "31832",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/31832"
            },
            {
              "name": "realvnc-rfb-protocol-code-execution(47937)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47937"
            },
            {
              "name": "realvnc-cmsgreader-code-execution(45969)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45969"
            },
            {
              "name": "oval:org.mitre.oval:def:9367",
              "refsource": "OVAL",
              "tags": [],
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9367"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 10.0,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 10.0,
          "obtainAllPrivilege": true,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2017-09-29T01:32Z",
      "publishedDate": "2009-01-16T21:30Z"
    }
  }
}

RHSA-2009:0261

Vulnerability from csaf_redhat - Published: 2009-02-11 17:52 - Updated: 2026-06-25 10:35

Summary

Red Hat Security Advisory: vnc security update

Severity

Moderate

Scope

1 vulnerability in this advisory, including CVE-2008-4770.

CVE-2008-4770

Fixed: 115 products

https://access.redhat.com/errata/RHSA-2009:0261

Open the full advisory

RHSA-2009_0261

Vulnerability from csaf_redhat - Published: 2009-02-11 17:52 - Updated: 2024-11-22 02:28

Summary

Red Hat Security Advisory: vnc security update

Severity

Moderate

Scope

1 vulnerability in this advisory, including CVE-2008-4770.

CVE-2008-4770

Fixed: 184 products

https://access.redhat.com/errata/RHSA-2009:0261

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2008-4770 (GCVE-0-2008-4770)

CERTA-2009-AVI-035

Description

Solution

CERTA-2009-AVI-035

Description

Solution

BDU:2015-02031 (CVE-2008-4770)

FKIE_CVE-2008-4770

GHSA-88J9-G2XV-54VP

GSD-2008-4770

RHSA-2009:0261

RHSA-2009_0261

Tags

Sightings

Nomenclature

Related by attack behaviour