Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2006-1652

76
FAUCET Score

CVE-2006-1652 describes multiple buffer overflow vulnerabilities in UltraVNC 1.0.1 and earlier, as well as tabbed_viewer 1.29. These flaws allow for user-assisted remote code execution on clients via a malicious server sending a long string to TCP port 5900, and denial of service on servers through a long HTTP GET request to TCP port 5800. With a CVSS score of 9.0, this vulnerability is critical, enabling complete compromise of confidentiality, integrity, and availability with low attack complexity. While not on the CISA KEV catalog, exploit modules are publicly available in Metasploit and ExploitDB, indicating a high potential for exploitation despite limited community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
1.29CPE matchmatch criteria
cpe:2.3:a:ultravnc:tabbed_viewer:1.29:*:*:*:*:*:*:*
1.0.1CPE matchmatch criteria
cpe:2.3:a:ultravnc:vnc_viewer:1.0.1:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

9.0HIGH

AV:N/AC:L/Au:S/C:C/I:C/A:C

Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Exploitability Score
8.0
Impact Score
10.0
CvssVersion
2.0

Exploit Intelligence

EPSS Score
67.40%
Probability of exploitation in next 30 days
EPSS Percentile
99.2%
Percentile rank of EPSS score among Peer Group
As of 2026-07-26
Model: v2026.06.15
Metasploit: UltraVNC 1.0.1 Client Buffer Overflow · Apr 4, 2006
ExploitDB: EDB-16490 · Apr 30, 2010
This CVE's current EPSS score of 0.6740 is in the 99th percentile among its peer group of 17,823 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Remediation records are not available for this CVE.

References

lists.grok.org.uk / pipermail/full-disclosure/2006-April/044901.html
secunia.com / advisories/19513
Vendor Advisory
securityreason.com / securityalert/674
exchange.xforce.ibmcloud.com / vulnerabilities/25648
exchange.xforce.ibmcloud.com / vulnerabilities/25650
exploit-db.com / exploits/1642
exploit-db.com / exploits/1643
securityfocus.com / archive/1/429930/100/0/threaded
securityfocus.com / archive/1/430287/100/0/threaded
securityfocus.com / archive/1/430711/100/0/threaded
securityfocus.com / bid/17378
Exploit
vupen.com / english/advisories/2006/1240
Vendor Advisory