$ cve CVE-2009-0388 JSON

CVE-2009-0388 EXPLOIT

10.0

HIGH · CVSS 2.0 · EPSS 13.3% (pctl 96)

Patch early

A public exploit exists.

Description

Multiple integer signedness errors in (1) UltraVNC 1.0.2 and 1.0.5 and (2) TightVnc 1.3.9 allow remote VNC servers to cause a denial of service (heap corruption and application crash) or possibly execute arbitrary code via a large length value in a message, related to the (a) ClientConnection::CheckBufferSize and (b) ClientConnection::CheckFileZipBufferSize functions in ClientConnection.cpp.

Scoring

CVSS	10.0 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS	13.33% — more likely to be exploited than 96% of all CVEs
Weakness	CWE-189
On CISA KEV	no
Public exploit	yes
Published	2009-02-04
Last modified	2026-06-16

Affected (2)

Vendor	Product
tightvnc	tightvnc
ultravnc	ultravnc

Public exploits

Source	Title	Date
exploit-db	TightVNC - Authentication Failure Integer Overflow (PoC)	2009-02-09
exploit-db	UltraVNC/TightVNC (Multiple VNC Clients) - Multiple Integer Overflows (PoC)	2009-02-04

References

→ the Explorer · watch your stack · NVD