Kaspersky Tightvnc vulnerabilities

CVE-2019-8287 [CRITICAL] CWE-120 CVE-2019-8287: TightVNC code version 1.3.10 contains global buffer overflow in HandleCoRREBBP macro function, which TightVNC code version 1.3.10 contains global buffer overflow in HandleCoRREBBP macro function, which can potentially result code execution. This attack appear to be exploitable via network connectivity.

CVE-2019-15678 [CRITICAL] CWE-122 CVE-2019-15678: TightVNC code version 1.3.10 contains heap buffer overflow in rfbServerCutText handler, which can po TightVNC code version 1.3.10 contains heap buffer overflow in rfbServerCutText handler, which can potentially result code execution.. This attack appear to be exploitable via network connectivity.

CVE-2019-15679 [CRITICAL] CWE-122 CVE-2019-15679: TightVNC code version 1.3.10 contains heap buffer overflow in InitialiseRFBConnection function, whic TightVNC code version 1.3.10 contains heap buffer overflow in InitialiseRFBConnection function, which can potentially result code execution. This attack appear to be exploitable via network connectivity.

CVE-2019-15680 [HIGH] CWE-476 CVE-2019-15680: TightVNC code version 1.3.10 contains null pointer dereference in HandleZlibBPP function, which resu TightVNC code version 1.3.10 contains null pointer dereference in HandleZlibBPP function, which results Denial of System (DoS). This attack appear to be exploitable via network connectivity.