Vulnerability in Ultravnc

CVE-2010-5248

Untrusted search path vulnerability in UltraVNC 1.0.8.2 allows local users to gain privileges via a Trojan horse vnclang.dll file in the current working directory, as demonstrated by a directory that contains a .vnc file. NOTE: some of th…

EPSS: 0.004 (32.3th percentile) — read the EPSS interpretation.

Affected products

  • Ultravnc — versions 1.0.8.2
  • N/a — versions n/a

References