Signature Detail

HTTP: UltraVNC VNCLog Buffer Overflow

This signature detects attempts to exploit a known vulnerability in the UltraVNC server. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the affected application.

Extended Description

UltraVNC is susceptible to multiple error-logging remote buffer-overflow vulnerabilities. These issues are due to the application's failure to properly bounds-check user-supplied input before copying it to insufficiently sized memory buffers. A successful attack may allow remote attackers to execute arbitrary code on a vulnerable computer to gain unauthorized access in the context of the application.

Affected Products

• UltraVNC Ultr@VNC 1.0.1

References

• BugTraq: 17378
• CVE: CVE-2006-1652