63 matches found
CVE-2022-23967
CVE-2022-23967 In TightVNC 1.3.10, there is an integer signedness error and resultant heap-based buffer overflow in InitialiseRFBConnection in rfbproto.c for the vncviewer component. There is no check on the size given to malloc, e.g., -1 is accepted. This allocates a chunk of size zero, which wi...
CVE-2026-7831: Off-by-one Error
UltraVNC viewer through 1.8.2.2 contains an off-by-one stack buffer overflow in the RFB ServerInit message handler. In vncviewer/ClientConnection.cpp, when the server-supplied nameLength equals exactly 2024 the code declares a 2024-byte stack buffer dn2024 and calls ReadStringdn, 2024. ReadString...
EUVD-2019-19944
UltraVNC Launcher 1.2.2.4 contains a buffer overflow vulnerability in the Path vncviewer.exe property field that allows local attackers to crash the application by supplying an excessively long string. Attackers can input a 300-byte payload of repeated characters through the Properties dialog to...
CVE-2019-25601
UltraVNC Launcher 1.2.2.4 contains a buffer overflow vulnerability in the Path vncviewer.exe property field that allows local attackers to crash the application by supplying an excessively long string. Attackers can input a 300-byte payload of repeated characters through the Properties dialog to...
CVE-2019-25601 UltraVNC Launcher 1.2.2.4 Denial of Service Buffer Overflow
UltraVNC Launcher 1.2.2.4 contains a buffer overflow vulnerability in the Path vncviewer.exe property field that allows local attackers to crash the application by supplying an excessively long string. Attackers can input a 300-byte payload of repeated characters through the Properties dialog to...
CVE-2019-25601
The CVE-2019-25601 entry concerns UltraVNC Launcher 1.2.2.4. The vulnerability is a buffer overflow in the Path vncviewer.exe property field that allows a local attacker to crash the application by supplying an excessively long string. Exploitation example: a 300-byte payload of repeated characte...
CVE-2019-25601
UltraVNC Launcher 1.2.2.4 contains a buffer overflow vulnerability in the Path vncviewer.exe property field that allows local attackers to crash the application by supplying an excessively long string. Attackers can input a 300-byte payload of repeated characters through the Properties dialog to...
CVE-2019-25601 UltraVNC Launcher 1.2.2.4 Denial of Service Buffer Overflow
UltraVNC Launcher 1.2.2.4 contains a buffer overflow vulnerability in the Path vncviewer.exe property field that allows local attackers to crash the application by supplying an excessively long string. Attackers can input a 300-byte payload of repeated characters through the Properties dialog to...
UltraVNC Launcher 缓冲区错误漏洞
UltraVNC Launcher is a launcher for the remote control software developed by UltraVNC Corporation. Version 1.2.2.4 of UltraVNC Launcher contains a buffer error vulnerability. This vulnerability stems from a buffer overflow in the Path vncviewer.exe attribute field, which could allow local attacke...
EUVD-2008-4980
Malware in sbrugna...
EUVD-2022-1998
Malicious code in bioql PyPI...
Denial Of Service (DoS)
ibvncserver.so is vulnerable to denial of service. The vulnerability exists due to the memory leak in the rfbClientCleanup function of vncviewer.c, allowing an attacker to crash the application by providing malicious input...
GHSA-2J4H-CJGH-659V Reflected XSS vulnerability in Jenkins VncViewer Plugin
VncViewer Plugin 1.7 and earlier does not escape a parameter value in the checkVncServ form validation endpoint output. This results in a reflected cross-site scripting XSS vulnerability. VncViewer Plugin 1.8 escapes the parameter value in the output...
Reflected XSS vulnerability in Jenkins VncViewer Plugin
VncViewer Plugin 1.7 and earlier does not escape a parameter value in the checkVncServ form validation endpoint output. This results in a reflected cross-site scripting XSS vulnerability. VncViewer Plugin 1.8 escapes the parameter value in the output...
tigervnc bug fix and enhancement update
Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Bug...
PT-2022-1003
Name of the Vulnerable Software and Affected Versions TigerVNC affected versions not specified Description The issue concerns an endianness problem in the TigerVNC vncviewer. Virtual Network Computing VNC is a remote display system that allows users to view a computing desktop environment from...
SUSE: Security Advisory (SUSE-SU-2015:0939-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CloudBees Jenkins VncViewer Plugin Cross-Site Scripting Vulnerability
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . VncViewer Plugin is used in which a VNC remo...