[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fidesyV7gLuTiSzdgexx5LLNXPA-9C2iobESOElWrmw0":3,"g5a-risk:CVE-2009-0388":163},{"success":4,"data":5,"meta":161},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":32,"epssPercentile":28,"epssTimeSeries":33,"severity":34,"affectedProducts":35,"affectedProductsCount":47,"references":48,"referencesCount":108,"weaknesses":109,"weaknessesCount":113,"isActivelyExploited":30,"cisaInfo":28,"otxData":28,"relatedBlogPosts":114,"seoMetadata":115,"configurations":140,"relatedVendorCves":152,"notableEvents":153},"CVE-2009-0388","What is CVE-2009-0388?","Multiple integer signedness errors in (1) UltraVNC 1.0.2 and 1.0.5 and (2) TightVnc 1.3.9 allow remote VNC servers to cause a denial of service (heap corruption and application crash) or possibly execute arbitrary code via a large length value in a message, related to the (a) ClientConnection::CheckBufferSize and (b) ClientConnection::CheckFileZipBufferSize functions in ClientConnection.cpp.","Multiple integer signedness errors in (1) UltraVNC 1.0.2 and 1.0.5 and (2) TightVnc 1.3.9 allow remote VNC servers to cause a denial of service (heap corrupt...","2009-02-04T19:30:00.53","2026-06-16T23:04:56.623",10,"AV:N\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":31},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":12,"ImpactScore":12,"ACInsufInfo":30,"ObtainAllPrivilege":4,"ObtainUserPrivilege":30,"ObtainOtherPrivilege":30,"UserInteractionRequired":30},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","LOW","NONE","COMPLETE","",null,"HIGH",false,[],0.13334,[32,32,32,32,32,32,32],"Critical",[36,40,44],{"vendor":37,"product":37,"version":38,"criteria":39,"vulnerable":4},"tightvnc","1.3.9","cpe:2.3:a:tightvnc:tightvnc:1.3.9:*:*:*:*:*:*:*",{"vendor":41,"product":41,"version":42,"criteria":43,"vulnerable":4},"ultravnc","1.0.2","cpe:2.3:a:ultravnc:ultravnc:1.0.2:*:*:*:*:*:*:*",{"vendor":41,"product":41,"version":45,"criteria":46,"vulnerable":4},"1.0.5","cpe:2.3:a:ultravnc:ultravnc:1.0.5:*:*:*:*:*:*:*",3,[49,53,57,61,66,70,74,78,81,85,88,90,92,94,96,98,100,102,104,106],{"url":50,"source":51,"tags":52},"http:\u002F\u002Fforum.ultravnc.info\u002Fviewtopic.php?t=14654","Ultravnc",[],{"url":54,"source":55,"tags":56},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F33807","Secunia",[],{"url":58,"source":59,"tags":60},"http:\u002F\u002Fvnc-tight.svn.sourceforge.net\u002Fviewvc\u002Fvnc-tight?view=rev&revision=3564","Sourceforge",[],{"url":62,"source":63,"tags":64},"http:\u002F\u002Fwww.coresecurity.com\u002Fcontent\u002Fvnc-integer-overflows","Coresecurity",[65],"Exploit",{"url":67,"source":68,"tags":69},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F500632\u002F100\u002F0\u002Fthreaded","Securityfocus",[],{"url":71,"source":68,"tags":72},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F33568",[65,73],"Patch",{"url":75,"source":76,"tags":77},"http:\u002F\u002Fwww.vupen.com\u002Fenglish\u002Fadvisories\u002F2009\u002F0321","Vupen",[],{"url":79,"source":76,"tags":80},"http:\u002F\u002Fwww.vupen.com\u002Fenglish\u002Fadvisories\u002F2009\u002F0322",[],{"url":82,"source":83,"tags":84},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F7990","Exploit-db",[],{"url":86,"source":83,"tags":87},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F8024",[],{"url":50,"source":51,"tags":89},[],{"url":54,"source":55,"tags":91},[],{"url":58,"source":59,"tags":93},[],{"url":62,"source":63,"tags":95},[65],{"url":67,"source":68,"tags":97},[],{"url":71,"source":68,"tags":99},[65,73],{"url":75,"source":76,"tags":101},[],{"url":79,"source":76,"tags":103},[],{"url":82,"source":83,"tags":105},[],{"url":86,"source":83,"tags":107},[],20,[110],{"id":111,"name":111,"description":112},"Unknown","CWE-189",1,[],{"title":116,"metaDescription":117,"keywords":118,"canonicalUrl":119,"structuredData":120},"What is CVE-2009-0388? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2009-0388, a critical severity cyber security vulnerability from 2009. Multiple integer signedness errors in (1) UltraVNC 1.0.2...","CVE-2009-0388, CVE-2009-0388 vulnerability, CVE-2009-0388 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2009, CVSS score, exploit, patch, remediation, tightvnc security, ultravnc security, tightvnc vulnerability, ultravnc vulnerability","\u002Fwhat-is\u002Fcve-2009-0388",{"@context":121,"@type":122,"headline":116,"description":117,"datePublished":10,"dateModified":11,"author":123,"publisher":127,"about":131,"mainEntityOfPage":135,"articleSection":138,"keywords":139},"https:\u002F\u002Fschema.org","TechArticle",{"@type":124,"name":125,"url":126},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":124,"name":125,"url":126,"logo":128},{"@type":129,"url":130},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":132,"name":6,"description":133,"additionalType":134},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":136,"@id":137},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2009-0388","Cybersecurity","CVE-2009-0388, CVE-2009-0388 vulnerability, CVE-2009-0388 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[141],{"Operator":28,"Negate":28,"Nodes":142},[143],{"Operator":144,"Negate":30,"CPEMatch":145},"OR",[146,148,150],{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":147,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"6E472222-224B-41BD-A788-F6D6AF96430B",{"Vulnerable":4,"Criteria":43,"MatchCriteriaID":149,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"C556A1A6-30ED-4988-B66B-CF823B297CF3",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":151,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"835FD162-1BE0-43C6-93A5-1E450505D2A9",[],[154],{"id":155,"eventType":156,"eventTime":157,"details":158,"label":159,"color":160},"10139cf1-c3eb-4e0f-87f5-c1362ec09cf9","LOW_EPSS_DELTA","2026-06-16T04:07:02.074133+00:00","Daily EPSS score decreased by 0.350 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":162,"version":22},1792474495418,{"score":164,"band":165,"action":166,"scoredAt":167},55,"Medium","Plan remediation","2026-10-19T06:37:39.26603+00:00"]