Advisories · Technology
uvnc UltraVNC.
Every CVE that names uvnc UltraVNC among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.3 CriticalCritical · CVSS 9+
UltraVNC repeater HTTP server global buffer overflow via long URI (pre-auth RCE)
- uvnc UltraVNC
- Memory corruption
- CVSS 9.1 CriticalCritical · CVSS 9+
UltraVNC repeater ships hardcoded default admin password allowing unauthenticated admin access
- uvnc UltraVNC
- Hard-coded credentials
- CVSS 8.7 High
UltraVNC viewer heap buffer overflow via integer overflow in RFB connection-failure reason length
- uvnc UltraVNC
- Memory corruption
- CVSS 7.5 High
UltraVNC viewer off-by-one stack overflow in ServerInit desktop name parsing
- uvnc UltraVNC
- Memory corruption
- CWE-193
- CVSS 7.4 High
UltraVNC MS-Logon II uses 64-bit Diffie-Hellman and seeded libc rand() enabling credential interception
- uvnc UltraVNC
- Weak cryptography or TLS
- CVSS 7.2 High
UltraVNC repeater authenticated out-of-bounds write in rule parser via oversized token
- uvnc UltraVNC
- Memory corruption
- CVSS 5.3 Medium
UltraVNC repeater integer overflow in win_log malloc leading to heap overflow
- uvnc UltraVNC
- Memory corruption
- CVSS 4.8 Medium
UltraVNC vncauth.c uses time-seeded libc rand() to generate VNC authentication challenge bytes
- uvnc UltraVNC
- Weak cryptography or TLS
- CVSS 4.3 Medium
UltraVNC vncWc2Mb calls wcslen() before validating that the wide string is NUL-terminated
- uvnc UltraVNC
- Memory corruption
- CVSS 3.7 Low
UltraVNC repeater wi_uudecode off-by-one in base64 decode boundary check
- uvnc UltraVNC
- CWE-193