HTTP: UltraVNC VNCLog Buffer Overflow

This signature detects attempts to exploit a known vulnerability in the UltraVNC server. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the affected application.

Extended Description

UltraVNC is susceptible to multiple error-logging remote buffer-overflow vulnerabilities. These issues are due to the application's failure to properly bounds-check user-supplied input before copying it to insufficiently sized memory buffers. A successful attack may allow remote attackers to execute arbitrary code on a vulnerable computer to gain unauthorized access in the context of the application.

Affected Products

Ultravnc ultr@vnc

References

BugTraq: 17378

CVE: CVE-2006-1652

Short Name

HTTP:ULTRAVNC-VNCLOG-BO

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: UltraVNC VNCLog Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?