Vulnerability Database

296,138

Total vulnerabilities in the database

CVE-2002-0971

Vulnerability in VNC, TightVNC, and TridiaVNC allows local users to execute arbitrary code as LocalSystem by using the Win32 Messaging System to bypass the VNC GUI and access the "Add new clients" dialogue box.

  • Published: Sep 24, 2002
  • Updated: Apr 13, 2023
  • CVE: CVE-2002-0971
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.6
  • AV:L/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
tridia / tridiavnc 1.5.2 1.5.2.x
att / winvnc_server - 3.3.3_r9.x
tightvnc / tightvnc 1.2.0 1.2.0.x
tightvnc / tightvnc 1.2.1 1.2.1.x
tridia / tridiavnc 1.5 1.5.x
tridia / tridiavnc 1.5.1 1.5.1.x
tridia / tridiavnc 1.5.4 1.5.4.x
att / winvnc_server 3.3.3_r7 3.3.3_r7.x
tightvnc / tightvnc 1.2.5 1.2.5.x