Signature Detail

VNC: UltraVNC Client Authentication Overflow

This signature detects attempts to exploit a known vulnerability against UltraVNC client. Versions 1.1 and below are vulnerable. Attackers can run arbitrary code with the privileges of the VNC client user, typically "Administrator." This exploit requires a vulnerable client to connect to a hostile VNC server.

Extended Description

UltraVNC is susceptible to multiple error-logging remote buffer-overflow vulnerabilities. These issues are due to the application's failure to properly bounds-check user-supplied input before copying it to insufficiently sized memory buffers. A successful attack may allow remote attackers to execute arbitrary code on a vulnerable computer to gain unauthorized access in the context of the application.

Affected Products

• UltraVNC Ultr@VNC 1.0.1

References

• BugTraq: 17378
• CVE: CVE-2006-1652