Buffer Overflow Vulnerabilities in UltraVNC by Ultr@VNC
CVE-2006-1652
Currently unrated
Key Information:
- Vendor
Ultravnc
- Status
- Vendor
- CVE Published:
- 6 April 2006
Badges
👾 Exploit Exists🟡 Public PoC🟣 EPSS 68%
What is CVE-2006-1652?
Multiple buffer overflow vulnerabilities exist in UltraVNC and the accompanying tabbed_viewer. Attackers can exploit these weaknesses by sending specially crafted input to a vulnerable client. This can lead to remote code execution when a carefully crafted server is connected to via TCP port 5900. Additionally, an extended HTTP GET request targeting TCP port 5800 may cause the server to crash, resulting in denial of service. Effective security measures should be implemented to mitigate these vulnerabilities.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.