CVE-2009-0388

CVE-2009-0388 is a critical vulnerability affecting UltraVNC 1.0.2 and 1.0.5, and TightVNC 1.3.9, stemming from multiple integer signedness errors. A remote VNC server can exploit this to cause a denial of service through heap corruption and application crashes, or potentially execute arbitrary code. With a CVSS score of 10.0, this vulnerability is easily exploitable over the network with low attack complexity and no authentication required, leading to complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog, proof-of-concept exploits are publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.