Skip to content
Noroxi

UltraVNC records

7 published records for vendor UltraVNC. 0 of them have been exploited in the wild (listed in CISA KEV) and 2 have a ready-made attack tool.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
2 · 28.6%
Pre-auth RCE
3
With a fix record
0%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    7 records
    • CVE-2006-1652
      56Plan

      Multiple buffer overflows in (a) UltraVNC (aka Ultr@VNC) 1.0.1 and earlier and (b) tabbed_viewer 1.29 (1) allow user-assisted remote attacke

      CriticalCVSS 9.0WeaponizedEPSS 68%

      ultravnc · tabbed viewerApr 6, 2006

    • CVE-2008-0610
      49Plan

      Stack-based buffer overflow in the ClientConnection::NegotiateProtocolVersion function in vncviewer/ClientConnection.cpp in vncviewer for Ul

      CriticalCVSS 9.3WeaponizedEPSS 38%

      ultravnc · ultravncFeb 6, 2008

    • CVE-2009-0388
      44Plan

      Multiple integer signedness errors in (1) UltraVNC 1.0.2 and 1.0.5 and (2) TightVnc 1.3.9 allow remote VNC servers to cause a denial of serv

      CriticalCVSS 10.0Proof of conceptEPSS 13%

      tightvnc · tightvncFeb 4, 2009

    • CVE-2006-2206
      41Plan

      The MS-Logon authentication scheme in UltraVNC (aka Ultr@VNC) 1.0.1 uses weak encryption (XOR) for challenge/response, which allows remote a

      CriticalCVSS 10.0No exploitEPSS 2%

      ultravnc · ultravncMay 5, 2006

    • CVE-2008-5001
      39Monitor

      Multiple stack-based buffer overflows in multiple functions in vncviewer/FileTransfer.cpp in vncviewer for UltraVNC 1.0.2 and 1.0.4 before 0

      CriticalCVSS 9.3No exploitEPSS 5%

      ultravnc · ultravncNov 10, 2008

    • CVE-2016-5673
      31Monitor

      UltraVNC Repeater before 1300 does not restrict destination IP addresses or TCP ports, which allows remote attackers to obtain open-proxy fu

      HighCVSS 7.5No exploitEPSS 1%

      ultravnc · repeaterAug 25, 2016

    • CVE-2010-5248
      27Monitor

      Untrusted search path vulnerability in UltraVNC 1.0.8.2 allows local users to gain privileges via a Trojan horse vnclang.dll file in the cur

      MediumCVSS 6.9No exploitEPSS 0%

      ultravnc · ultravncSep 7, 2012