Description
UltraVNC Launcher 1.2.4.0 contains a denial of service vulnerability in its password configuration properties that allows local attackers to crash the application. Attackers can paste an overly long 300-character string into the password field to trigger an application crash and prevent normal launcher functionality.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| UltraVNC Team | UltraVNC Launcher | 1.2.4.0 | — |
References
- ExploitDB-48290 exploit
- UltraVNC Official Homepage product
- VulnCheck Advisory: UltraVNC Launcher 1.2.4.0 - 'Password' Denial of Service third-party-advisory