CVE-2026-7831 UltraVNC viewer off-by-one stack overflow in ServerInit desktop name parsing

UltraVNC viewer through 1.8.2.2 contains an off-by-one stack buffer overflow in the RFB ServerInit message handler. In vncviewer/ClientConnection.cpp, when the server-supplied nameLength equals exactly 2024 the code declares a 2024-byte stack buffer dn2024 and calls ReadStringdn, 2024. ReadString...

CVE-2026-7831 UltraVNC viewer off-by-one stack overflow in ServerInit desktop name parsing

UltraVNC viewer through 1.8.2.2 contains an off-by-one stack buffer overflow in the RFB ServerInit message handler. In vncviewer/ClientConnection.cpp, when the server-supplied nameLength equals exactly 2024 the code declares a 2024-byte stack buffer dn2024 and calls ReadStringdn, 2024. ReadString...

CVE-2026-7831

UltraVNC viewer

Chicken of the VNC远程拒绝服务漏洞

Chicken of the VNC是一款针对MacOS的VNC客户端。 Chicken of the VNC不正确验证ServerInit报文内容，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 ServerInit报文包含服务器计算机名和大小，格式如下： ...computer-name-sizecomputer-name...

Out-of-bounds

Chicken of the VNC cotv 2.0 allows remote attackers to cause a denial of service application crash via a large computer-name size value in a ServerInit packet, which triggers a failed malloc and a resulting NULL dereference...

CVE-2007-0756

Chicken of the VNC cotv 2.0 allows remote attackers to cause a denial of service application crash via a large computer-name size value in a ServerInit packet, which triggers a failed malloc and a resulting NULL dereference...

cotv2-dos.txt

hi, i wish to inform you that cotv 2.0 a vnc client for maxosx available at http://sourceforge.net/projects/cotvnc/ is prone to a remotely exploitable denial of service vulnerability because it fails to validate the content of ServerInit packets. A ServerInit packet contains the server's computer...