1.0.4

DATE	CVE	VULNERABILITY TITLE	RISK
2008-11-10	CVE-2008-5001	Buffer Errors vulnerability in Ultravnc 1.0.2/1.0.4 Multiple stack-based buffer overflows in multiple functions in vncviewer/FileTransfer.cpp in vncviewer for UltraVNC 1.0.2 and 1.0.4 before 01252008, when in LISTENING mode or when using the DSM plugin, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified parameters, a different issue than CVE-2008-0610. network ultravnc CWE-119 critical	9.3
2008-02-06	CVE-2008-0610	Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Ultravnc Stack-based buffer overflow in the ClientConnection::NegotiateProtocolVersion function in vncviewer/ClientConnection.cpp in vncviewer for UltraVNC 1.0.2 and 1.0.4 before 01252008, when in LISTENING mode or when using the DSM plugin, allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a modified size value. network ultravnc CWE-119 critical	9.3