UltraVNC kayıtları
ultravnc üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 2 · %28,6
- Pre-auth RCE
- 3
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer3
- CWE-189 Numeric Errors1
- CWE-284 Improper Access Control1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
56Planlayın | CVE-2006-1652Silahlaştırılmış | Multiple buffer overflows in (a) UltraVNC (aka Ultr@VNC) 1.0.1 and earlier and (b) tabbed_viewer 1.29 (1) allow user-assisted remote attackeultravnc · tabbed viewer · CWE-119 | Kritik9,0 | — | %68,0 | 6 Nis 2006 |
49Planlayın | CVE-2008-0610Silahlaştırılmış | Stack-based buffer overflow in the ClientConnection::NegotiateProtocolVersion function in vncviewer/ClientConnection.cpp in vncviewer for Ulultravnc · ultravnc · CWE-119 | Kritik9,3 | — | %38,8 | 6 Şub 2008 |
44Planlayın | CVE-2009-0388Kavram kanıtı | Multiple integer signedness errors in (1) UltraVNC 1.0.2 and 1.0.5 and (2) TightVnc 1.3.9 allow remote VNC servers to cause a denial of servtightvnc · tightvnc · CWE-189 | Kritik10,0 | — | %13,3 | 4 Şub 2009 |
41Planlayın | CVE-2006-2206İstismar yok | The MS-Logon authentication scheme in UltraVNC (aka Ultr@VNC) 1.0.1 uses weak encryption (XOR) for challenge/response, which allows remote aultravnc · ultravnc | Kritik10,0 | — | %2,1 | 5 May 2006 |
39İzleyin | CVE-2008-5001İstismar yok | Multiple stack-based buffer overflows in multiple functions in vncviewer/FileTransfer.cpp in vncviewer for UltraVNC 1.0.2 and 1.0.4 before 0ultravnc · ultravnc · CWE-119 | Kritik9,3 | — | %5,6 | 10 Kas 2008 |
31İzleyin | CVE-2016-5673İstismar yok | UltraVNC Repeater before 1300 does not restrict destination IP addresses or TCP ports, which allows remote attackers to obtain open-proxy fuultravnc · repeater · CWE-284 | Yüksek7,5 | — | %1,9 | 25 Ağu 2016 |
27İzleyin | CVE-2010-5248İstismar yok | Untrusted search path vulnerability in UltraVNC 1.0.8.2 allows local users to gain privileges via a Trojan horse vnclang.dll file in the curultravnc · ultravnc | Orta6,9 | — | %0,4 | 7 Eyl 2012 |
- CVE-2006-165256Planlayın
Multiple buffer overflows in (a) UltraVNC (aka Ultr@VNC) 1.0.1 and earlier and (b) tabbed_viewer 1.29 (1) allow user-assisted remote attacke
KritikCVSS 9,0SilahlaştırılmışEPSS %68ultravnc · tabbed viewer6 Nis 2006
- CVE-2008-061049Planlayın
Stack-based buffer overflow in the ClientConnection::NegotiateProtocolVersion function in vncviewer/ClientConnection.cpp in vncviewer for Ul
KritikCVSS 9,3SilahlaştırılmışEPSS %39ultravnc · ultravnc6 Şub 2008
- CVE-2009-038844Planlayın
Multiple integer signedness errors in (1) UltraVNC 1.0.2 and 1.0.5 and (2) TightVnc 1.3.9 allow remote VNC servers to cause a denial of serv
KritikCVSS 10,0Kavram kanıtıEPSS %13tightvnc · tightvnc4 Şub 2009
- CVE-2006-220641Planlayın
The MS-Logon authentication scheme in UltraVNC (aka Ultr@VNC) 1.0.1 uses weak encryption (XOR) for challenge/response, which allows remote a
KritikCVSS 10,0İstismar yokEPSS %2ultravnc · ultravnc5 May 2006
- CVE-2008-500139İzleyin
Multiple stack-based buffer overflows in multiple functions in vncviewer/FileTransfer.cpp in vncviewer for UltraVNC 1.0.2 and 1.0.4 before 0
KritikCVSS 9,3İstismar yokEPSS %6ultravnc · ultravnc10 Kas 2008
- CVE-2016-567331İzleyin
UltraVNC Repeater before 1300 does not restrict destination IP addresses or TCP ports, which allows remote attackers to obtain open-proxy fu
YüksekCVSS 7,5İstismar yokEPSS %2ultravnc · repeater25 Ağu 2016
- CVE-2010-524827İzleyin
Untrusted search path vulnerability in UltraVNC 1.0.8.2 allows local users to gain privileges via a Trojan horse vnclang.dll file in the cur
OrtaCVSS 6,9İstismar yokEPSS %0ultravnc · ultravnc7 Eyl 2012