CVE-2006-1652

Multiple buffer overflows in (a) UltraVNC (aka Ultr@VNC) 1.0.1 and earlier and (b) tabbed_viewer 1.29 (1) allow user-assisted remote attackers to execute…

published April 6, 2006

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.3th percentile for exploit probability.

CVSS
—
EPSS
68%
Percentile
99.3
In the wild
Unconfirmed
What it is

⚠️ Two buffer overflows tucked away in UltraVNC and tabbed_viewer could spell trouble! An attacker could sneak in malicious strings, turning your remote access into a risky venture. 🔥 Think of UltraVNC like a pizza delivery service that accepts any order. If someone sends in a ridiculously long pizza request, it might just crash the delivery system, leaving everyone hungry on a Friday night! If exploited, a remote attacker could execute arbitrary code on the client, essentially hijacking your remote session! Alternatively, a long HTTP GET request could crash the server, making it unresponsive at the most inconvenient times—think of it as a pizza place shutting down during dinner rush!

Put simply

Think of UltraVNC like a pizza delivery service that accepts any order. If someone sends in a ridiculously long pizza request, it might just crash the delivery system, leaving everyone hungry on a Friday night! This vulnerability involves multiple buffer overflows in UltraVNC 1.0.1 and earlier, allowing attackers to send malicious payloads to a client connecting via TCP port 5900, or cause a denial of service through long requests sent to TCP port 5800.

What to do

If exploited, a remote attacker could execute arbitrary code on the client, essentially hijacking your remote session! Alternatively, a long HTTP GET request could crash the server, making it unresponsive at the most inconvenient times—think of it as a pizza place shutting down during dinner rush! To safeguard against this, upgrade UltraVNC to the latest version to patch these vulnerabilities. Regularly audit your remote access setup and consider implementing additional security measures to monitor unusual traffic. You've got this! Stay vigilant, follow the steps, and keep your remote access secure. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.68036 · 99.3th percentile
Published
2006-04-06T10:00Z
EPSS history
Timeline
  • 06 APR 10:00Z
    Multiple buffer overflows in (a) UltraVNC (aka Ultr@VNC) 1.0.1 and earlier and (b) tabbed_viewer 1.29 (1) allow user-assisted remote attackers to execute…
    cvelistv5