CVE-2009-0388
NoneCVSS
—
EPSS
13.3%
Published
Feb 4, 2009
CISA due date
—
The record
Multiple integer signedness errors in (1) UltraVNC 1.0.2 and 1.0.5 and (2) TightVnc 1.3.9 allow remote VNC servers to cause a denial of service (heap corruption and application crash) or possibly execute arbitrary code via a large length value in a message, related to the (a) ClientConnection::CheckBufferSize and (b) ClientConnection::CheckFileZipBufferSize functions in ClientConnection.cpp.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-102621 A vulnerability was identified in Freedesktop Poppler up to 26.08.0. CWE-189
- CVE-2026-102620 A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. CWE-189
- CVE-2026-93314 A vulnerability was determined in Freedesktop Poppler 26.07.0. CWE-189
- CVE-2026-93313 A vulnerability was found in Freedesktop Poppler 26.07.0. CWE-189
- CVE-2026-93311 A vulnerability was detected in Freedesktop Poppler 26.07.0. CWE-189
- CVE-2026-86297 A vulnerability was identified in D-Link DIR-605 B1v202WWB03. CWE-189
- CVE-2026-86289 A vulnerability was found in Ollama up to 0.31.1. CWE-189
- CVE-2026-82908 A vulnerability was found in MSI Dragon Center up to 2.0.155.0. CWE-189