CVE-2008-0610

This exploit targets a buffer overflow in UltraVNC Viewer 1.0.2 by sending a maliciously crafted response to a client connection, leveraging a trusted size integer to overflow a stack-based buffer. It achieves remote code execution by overwriting the return address with a pop/pop/ret gadget.

This Metasploit module exploits a buffer overflow in UltraVNC Viewer 1.0.2 by sending a maliciously crafted response to a client connection, triggering a stack-based overflow when the client reads a trusted size into a fixed-length buffer. The exploit leverages a specific minor protocol version (14 or 16) to bypass checks and execute arbitrary payloads.