Tightvnc

11 CVEs across 1 Tightvnc products. Browse Tightvnc vulnerabilities, severities, and proof-of-concept exploits.

Tightvnc products with known CVEs

ProductCVEs
Tightvnc11
Tightvnc CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2023-27830Critical9.02023-04-12TightVNC before v2.8.75 allows attackers to escalate privileges on the host operating system via replacing legitimate files with crafted files when executing a…
CVE-2021-42785Critical9.82021-11-23Buffer Overflow vulnerability in tvnviewer.exe of TightVNC Viewer allows a remote attacker to execute arbitrary instructions via a crafted FramebufferUpdate pa…
CVE-2019-8287Critical9.82019-10-29TightVNC code version 1.3.10 contains global buffer overflow in HandleCoRREBBP macro function, which can potentially result code execution. This attack appear…
CVE-2019-15680High7.52019-10-29TightVNC code version 1.3.10 contains null pointer dereference in HandleZlibBPP function, which results Denial of System (DoS). This attack appear to be exploi…
CVE-2019-15679Critical9.82019-10-29TightVNC code version 1.3.10 contains heap buffer overflow in InitialiseRFBConnection function, which can potentially result code execution. This attack appear…
CVE-2019-15678Critical9.82019-10-29TightVNC code version 1.3.10 contains heap buffer overflow in rfbServerCutText handler, which can potentially result code execution.. This attack appear to be…
CVE-2009-03882009-02-04Multiple integer signedness errors in (1) UltraVNC 1.0.2 and 1.0.5 and (2) TightVnc 1.3.9 allow remote VNC servers to cause a denial of service (heap corruptio…
CVE-2002-15112003-03-03The vncserver wrapper for vnc before 3.3.3r2-21 uses the rand() function instead of srand(), which causes vncserver to generate weak cookies.
CVE-2002-18482002-12-31TightVNC before 1.2.4 running on Windows stores unencrypted passwords in the password text control of the WinVNC Properties dialog, which could allow local use…
CVE-2002-13362002-12-11TightVNC before 1.2.6 generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by sniffing the…
CVE-2002-09712002-09-24Vulnerability in VNC, TightVNC, and TridiaVNC allows local users to execute arbitrary code as LocalSystem by using the Win32 Messaging System to bypass the VNC…