CVE-2001-0167 Buffer overflow in AT&T WinVNC (Virtual Network Computing) client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnFailed packet with a long reason string.
HighCVSS 7.6
EPSS 50.8%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in AT&T WinVNC (Virtual Network Computing) client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnFailed packet with a long reason string.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| att winvnc | <= 3.3.3r7 | No fix listed |
References
- 20010129 [CORE SDI ADVISORY] WinVNC client buffer overflow mailing-list
- 2305 patch vdb-entry vendor-advisory
- winvnc-client-bo(6025) vdb-entry