CVE-2008-4770
Critical
Description
The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0 through 4.1.2, Enterprise Edition E4.0 through E4.4.2, and Personal Edition P4.0 through P4.4.2 allows remote VNC servers to execute arbitrary code via crafted RFB protocol data, related to "encoding type."
SeverityCritical
CVSS10.0
Exploit probability—
ProductRealvnc
PublishedJan 16, 2009
First seenJan 16, 2009
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| realvnc realvnc | 4.0, 4.1.2, 4.4.2, e4.0, p4.0, p4.4.2 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.