Description
UltraVNC Viewer 1.2.2.4 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized string to the VNC Server input field. Attackers can paste a malicious string containing 256 repeated characters into the VNC Server field and click Connect to trigger a buffer overflow that crashes the viewer.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Uvnc | UltraVNC Viewer | 1.2.2.4 | — |
References
- ExploitDB-46702 exploit
- Official Product Homepage product
- Product Reference product
- VulnCheck Advisory: UltraVNC Viewer 1.2.2.4 Denial of Service via Buffer Overflow third-party-advisory