CVE:CVE-2019-8271
CNNVD:CNNVD-201903-280
UltraVNC是一款用于Windows平台的开源远程终端控制软件。
UltraVNC 1211版本中的文件传输处理程序的VNC服务器代码存在堆缓冲区溢出漏洞。攻击者可利用该漏洞执行代码。
solution:Upgrade uvnc ultravnc to a higher version than 1.2.2.3,and avoid the version (,1.2.2.3); Upgrade siemens sinumerik_access_mymachine/p2p to a higher version than 4.8,and avoid the version (,4.8); Upgrade siemens sinumerik_pcu_base_win10_software/ipc to a higher version than 14.00,and avoid the version (,14.00); Upgrade siemens sinumerik_pcu_base_win7_software/ipc to a higher version than 12.01,and avoid the version (,12.01]