UltraVNC Viewer 1.2.4.0 - 'VNCServer' Denial of Service
Vulnerability Description
UltraVNC Viewer 1.2.4.0 contains a denial of service vulnerability that allows attackers to crash the application by manipulating VNC Server input. Attackers can generate a malformed 256-byte payload and paste it into the VNC Server connection dialog to trigger an application crash.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-37134
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- chuyreds
References
Affected Vendor
UltraVNC Team
View all reports →