Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Att Subscribe
Filtered by product Winvnc
Total 4 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2001-0167 1 Att 1 Winvnc 2017-12-18 7.6 HIGH N/A
Buffer overflow in AT&T WinVNC (Virtual Network Computing) client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnFailed packet with a long reason string.
CVE-2001-0168 1 Att 1 Winvnc 2017-12-18 10.0 HIGH N/A
Buffer overflow in AT&T WinVNC (Virtual Network Computing) server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET request when the DebugLevel registry key is greater than 0.
CVE-2000-1164 1 Att 1 Winvnc 2017-10-09 9.0 HIGH N/A
WinVNC installs the WinVNC3 registry key with permissions that give Special Access (read and modify) to the Everybody group, which allows users to read and modify sensitive information such as passwords and gain access to the system.
CVE-2001-1422 1 Att 1 Winvnc 2017-07-10 7.5 HIGH N/A
WinVNC 3.3.3 and earlier generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by sniffing the challenge and response of other users.