Tightvnc

Vendor:

First CVE: Sep 24, 2002 · Active for 23 years

11
Total CVEs
More Total CVEs than 90% of tracked products
1.8
Avg CVEs / Year
Higher CVE frequency than 63% of tracked products
7.7
Avg CVSS
Higher Avg CVSS than 65% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Tightvnc over time

Volume of CVEsAvg CVSS Base Score
First CVE
Sep 24, 2002
23 years ago
Most Recent CVE
Apr 12, 2023
1,203 days ago

CVE Severity & Scoring

Tightvnc11 CVEs
All CVEs353,173 CVEs
LowMediumHighCritical
Attack Vector
Local0 (0.0%)
Network6 (54.5%)
Unknown5 (45.5%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low6 (54.5%)
High0 (0.0%)
Unknown5 (45.5%)
User Interaction
None5 (45.5%)
Unknown5 (45.5%)
Required1 (9.1%)
Privileges Required
Low1 (9.1%)
High0 (0.0%)
None5 (45.5%)
Unknown5 (45.5%)

Top CVEs

Signals from CVEs in this product scope (11 CVEs).

11 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
Multiple integer signedness errors in (1) UltraVNC 1.0.2 and 1.0.5 and (2) TightVnc 1.3.9 allow remote VNC servers to cause a denial of service (heap corruption and application cra
Feb 4, 200910.041NOYES
TightVNC code version 1.3.10 contains heap buffer overflow in rfbServerCutText handler, which can potentially result code execution.. This attack appear to be exploitable via netwo
Oct 29, 20199.836NONO
TightVNC code version 1.3.10 contains global buffer overflow in HandleCoRREBBP macro function, which can potentially result code execution. This attack appear to be exploitable via
Oct 29, 20199.833NONO
TightVNC code version 1.3.10 contains heap buffer overflow in InitialiseRFBConnection function, which can potentially result code execution. This attack appear to be exploitable vi
Oct 29, 20199.833NONO
Buffer Overflow vulnerability in tvnviewer.exe of TightVNC Viewer allows a remote attacker to execute arbitrary instructions via a crafted FramebufferUpdate packet from a VNC serve
Nov 23, 20219.831NONO
TightVNC before v2.8.75 allows attackers to escalate privileges on the host operating system via replacing legitimate files with crafted files when executing a file transfer. This
Apr 12, 20239.028NONO
TightVNC code version 1.3.10 contains null pointer dereference in HandleZlibBPP function, which results Denial of System (DoS). This attack appear to be exploitable via network con
Oct 29, 20197.523NONO
TightVNC before 1.2.6 generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by sniffing the challenge and respons
Dec 11, 20027.521NONO
The vncserver wrapper for vnc before 3.3.3r2-21 uses the rand() function instead of srand(), which causes vncserver to generate weak cookies.
Mar 3, 20035.015NONO
Vulnerability in VNC, TightVNC, and TridiaVNC allows local users to execute arbitrary code as LocalSystem by using the Win32 Messaging System to bypass the VNC GUI and access the "
Sep 24, 20024.614NONO

Exploit Exposure

Signals from CVEs in this product scope (11 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
9.1% of CVEs· 86th percentile

Social Chatter

Signals from CVEs in this product scope (11 CVEs).

Media Mentions

Signals from CVEs in this product scope (11 CVEs).

Top CNAs Publishing CVEs For Tightvnc

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
1.3.9110.013.3%01
1.3.1049.211.5%00
1.2.535.71.5%00
1.2.426.32.1%00
1.2.334.91.5%00
1.2.223.51.1%00
1.2.144.81.2%00
1.2.035.71.5%00
1.212.10.3%00