description: UltraVNC revision 1206 has stack-based Buffer overflow vulnerability in VNC client code inside FileTransfer module, which leads to a denial of service (DoS) condition. This attack appear to be exploitable via network connectivity. This vulnerability has been fixed in revision 1207.
problem types: CWE-121: Stack-based Buffer Overflow
affected:
{
product: UltraVNC
vendor: Kaspersky Lab
versions:
status: affected, version: 1.2.2.3
}