description: UltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code, which result in out-of-bound data being accessed by remote users. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212.
problem types: CWE-170: Improper Null Termination
affected:
{
product: UltraVNC
vendor: Kaspersky Lab
versions:
status: affected, version: 1.2.2.3
}