tightvnc records
12 published records for vendor tightvnc.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 41.7%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2
- CWE-122 Heap-based Buffer Overflow2
- CWE-189 Numeric Errors1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-269 Improper Privilege Management1
- CWE-476 NULL Pointer Dereference1
The weakness classes this vendor ships most often: where to look.
CWEAll records
12 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
45Plan | CVE-2019-8287No exploit | TightVNC code version 1.3.10 contains global buffer overflow in HandleCoRREBBP macro function, which can potentially result code execution.tightvnc · tightvnc · CWE-120 | Critical9.8 | — | 19.4% | Oct 29, 2019 |
44Plan | CVE-2009-0388Proof of concept | Multiple integer signedness errors in (1) UltraVNC 1.0.2 and 1.0.5 and (2) TightVnc 1.3.9 allow remote VNC servers to cause a denial of servtightvnc · tightvnc · CWE-189 | Critical10.0 | — | 13.3% | Feb 4, 2009 |
43Plan | CVE-2019-15678No exploit | TightVNC code version 1.3.10 contains heap buffer overflow in rfbServerCutText handler, which can potentially result code execution..tightvnc · tightvnc · CWE-122 | Critical9.8 | — | 12.8% | Oct 29, 2019 |
43Plan | CVE-2019-15679No exploit | TightVNC code version 1.3.10 contains heap buffer overflow in InitialiseRFBConnection function, which can potentially result code execution.tightvnc · tightvnc · CWE-122 | Critical9.8 | — | 11.8% | Oct 29, 2019 |
40Plan | CVE-2021-42785No exploit | Buffer Overflow in tvnviewer.exe via Crafted Packet in TightVNC Viewer 2.8.59tightvnc · tightvnc · CWE-120 | Critical9.8 | — | 2.3% | Nov 23, 2021 |
37Monitor | CVE-2024-42049Proof of concept | TightVNC (Server for Windows) before 2.8.84 allows attackers to connect to the control pipe via a network connection.CWE-200 | Critical9.1 | — | 2.1% | Jul 27, 2024 |
36Monitor | CVE-2023-27830No exploit | TightVNC before v2.8.75 allows attackers to escalate privileges on the host operating system via replacing legitimate files with crafted filtightvnc · tightvnc · CWE-269 | Critical9.0 | — | 1.0% | Apr 12, 2023 |
31Monitor | CVE-2019-15680No exploit | TightVNC code version 1.3.10 contains null pointer dereference in HandleZlibBPP function, which results Denial of System (DoS).tightvnc · tightvnc · CWE-476 | High7.5 | — | 2.6% | Oct 29, 2019 |
31Monitor | CVE-2002-1336No exploit | TightVNC before 1.2.6 generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authenticatitightvnc · tightvnc | High7.5 | — | 2.4% | Dec 11, 2002 |
21Monitor | CVE-2002-1511No exploit | The vncserver wrapper for vnc before 3.3.3r2-21 uses the rand() function instead of srand(), which causes vncserver to generate weak cookiesatt · vnc | Medium5.0 | — | 1.8% | Mar 3, 2003 |
18Monitor | CVE-2002-0971No exploit | Vulnerability in VNC, TightVNC, and TridiaVNC allows local users to execute arbitrary code as LocalSystem by using the Win32 Messaging Systetightvnc · tightvnc | Medium4.6 | — | 0.3% | Sep 24, 2002 |
8Monitor | CVE-2002-1848No exploit | TightVNC before 1.2.4 running on Windows stores unencrypted passwords in the password text control of the WinVNC Properties dialog, which cotightvnc · tightvnc | Low2.1 | — | 0.3% | Dec 31, 2002 |
- CVE-2019-828745Plan
TightVNC code version 1.3.10 contains global buffer overflow in HandleCoRREBBP macro function, which can potentially result code execution.
CriticalCVSS 9.8No exploitEPSS 19%tightvnc · tightvncOct 29, 2019
- CVE-2009-038844Plan
Multiple integer signedness errors in (1) UltraVNC 1.0.2 and 1.0.5 and (2) TightVnc 1.3.9 allow remote VNC servers to cause a denial of serv
CriticalCVSS 10.0Proof of conceptEPSS 13%tightvnc · tightvncFeb 4, 2009
- CVE-2019-1567843Plan
TightVNC code version 1.3.10 contains heap buffer overflow in rfbServerCutText handler, which can potentially result code execution..
CriticalCVSS 9.8No exploitEPSS 12%tightvnc · tightvncOct 29, 2019
- CVE-2019-1567943Plan
TightVNC code version 1.3.10 contains heap buffer overflow in InitialiseRFBConnection function, which can potentially result code execution.
CriticalCVSS 9.8No exploitEPSS 11%tightvnc · tightvncOct 29, 2019
- CVE-2021-4278540Plan
Buffer Overflow in tvnviewer.exe via Crafted Packet in TightVNC Viewer 2.8.59
CriticalCVSS 9.8No exploitEPSS 2%tightvnc · tightvncNov 23, 2021
- CVE-2024-4204937Monitor
TightVNC (Server for Windows) before 2.8.84 allows attackers to connect to the control pipe via a network connection.
CriticalCVSS 9.1Proof of conceptEPSS 2%Jul 27, 2024
- CVE-2023-2783036Monitor
TightVNC before v2.8.75 allows attackers to escalate privileges on the host operating system via replacing legitimate files with crafted fil
CriticalCVSS 9.0No exploitEPSS 1%tightvnc · tightvncApr 12, 2023
- CVE-2019-1568031Monitor
TightVNC code version 1.3.10 contains null pointer dereference in HandleZlibBPP function, which results Denial of System (DoS).
HighCVSS 7.5No exploitEPSS 2%tightvnc · tightvncOct 29, 2019
- CVE-2002-133631Monitor
TightVNC before 1.2.6 generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authenticati
HighCVSS 7.5No exploitEPSS 2%tightvnc · tightvncDec 11, 2002
- CVE-2002-151121Monitor
The vncserver wrapper for vnc before 3.3.3r2-21 uses the rand() function instead of srand(), which causes vncserver to generate weak cookies
MediumCVSS 5.0No exploitEPSS 1%att · vncMar 3, 2003
- CVE-2002-097118Monitor
Vulnerability in VNC, TightVNC, and TridiaVNC allows local users to execute arbitrary code as LocalSystem by using the Win32 Messaging Syste
MediumCVSS 4.6No exploitEPSS 0%tightvnc · tightvncSep 24, 2002
- CVE-2002-18488Monitor
TightVNC before 1.2.4 running on Windows stores unencrypted passwords in the password text control of the WinVNC Properties dialog, which co
LowCVSS 2.1No exploitEPSS 0%tightvnc · tightvncDec 31, 2002