Vulnerability in Tightvnc

CVE-2009-0388

Multiple integer signedness errors in (1) UltraVNC 1.0.2 and 1.0.5 and (2) TightVnc 1.3.9 allow remote VNC servers to cause a denial of service (heap corruption and application crash) or possibly execute arbitrary code via a large length v…

EPSS: 0.133 (96.0th percentile) — read the EPSS interpretation.

Affected products

  • Tightvnc — versions 1.3.9
  • Ultravnc — versions 1.0.2, 1.0.5
  • N/a — versions n/a

Weakness classification (CWE)

References