CVE-2002-0971

Published: Sep 24, 2002Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

Vulnerability in VNC, TightVNC, and TridiaVNC allows local users to execute arbitrary code as LocalSystem by using the Win32 Messaging System to bypass the VNC GUI and access the "Add new clients" dialogue box.

Affected (9)

Products: Att: Winvnc Server · Tightvnc: Tightvnc · Tridia: Tridiavnc

1 product

1 product

1 product

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Att Winvnc Server	Up to 3.3.3_r9
Att Winvnc Server	Version 3.3.3_r7
Tightvnc Tightvnc	Version 1.2.0
Tightvnc Tightvnc	Version 1.2.1
Tightvnc Tightvnc	Version 1.2.5
Tridia Tridiavnc	Version 1.5.1
Tridia Tridiavnc	Version 1.5.2
Tridia Tridiavnc	Version 1.5.4
Tridia Tridiavnc	Version 1.5

References (6)

http://marc.info/?l=bugtraq&m=102994289123085&w=2

Source: cve@mitre.org

http://www.iss.net/security_center/static/9979.php

Source: cve@mitre.org

http://www.securityfocus.com/bid/5530

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=102994289123085&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.iss.net/security_center/static/9979.php

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/5530

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.