CVE-2000-1164 describes a critical vulnerability in WinVNC where the WinVNC3 registry key is installed with overly permissive access rights, granting the "Everybody" group Special Access (read and modify). This allows any user to read and alter sensitive information, including passwords, potentially leading to unauthorized system access. With a CVSS score of 9.0 (HIGH), this vulnerability is easily exploitable over the network with low attack complexity and authenticated access, resulting in complete compromise of confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
3.3.3CPE matchmatch criteria | cpe:2.3:a:att:winvnc:3.3.3:*:*:*:*:*:*:* | ||
3.3.3r7CPE matchmatch criteria | cpe:2.3:a:att:winvnc:3.3.3r7:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:S/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.