CVE-2009-0388: tightvnc Numeric Errors

EPSS trend

Probability

13.33%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

0.00 pp

From 13.33% on 18-09-2026

18-09-202618-10-2026

EPSS score

13.33%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

4 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
referenceUnverified
Exploit Reference (coresecurity.com)
Maturity: unknown
exploit-databasedoswindowsVerified
TightVNC - Authentication Failure Integer Overflow (PoC)
Maturity: poc

Show all 4 exploits

exploit-databasedoswindowsVerified
UltraVNC/TightVNC (Multiple VNC Clients) - Multiple Integer Overflows (PoC)
Maturity: poc

References

10 links

forum.ultravnc.info/viewtopic.php?t=14654X Refsource CONFIRM
vnc-tight.svn.sourceforge.net/viewvc/vnc-tight?view=rev&revision=3564X Refsource CONFIRM
www.vupen.com/english/advisories/2009/0321VDB EntryX Refsource VUPEN
www.securityfocus.com/bid/33568VDB EntryX Refsource BIDExploitPatch
www.securityfocus.com/archive/1/500632/100/0/threadedMailing ListX Refsource BUGTRAQ
www.exploit-db.com/exploits/8024ExploitX Refsource EXPLOIT DB
www.coresecurity.com/content/vnc-integer-overflowsX Refsource MISCExploit
www.vupen.com/english/advisories/2009/0322VDB EntryX Refsource VUPEN
www.exploit-db.com/exploits/7990ExploitX Refsource EXPLOIT DB
secunia.com/advisories/33807Third Party AdvisoryX Refsource SECUNIA

Related vulnerabilities

CVE-2018-15361ultravncultravnc+12.88%7y ago05-03-2019 15:00UltraVNC revision 1198 has a buffer underflow vulnerability in VNC client code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1199.CVE-2021-42785ubuntutightvnc+22.34%4y ago23-11-2021 21:37Buffer Overflow vulnerability in tvnviewer.exe of TightVNC Viewer allows a remote attacker to execute arbitrary instructions via a crafted FramebufferUpdate packet from a VNC server.CVE-2008-0610ultravncultravnc38.76%18y ago06-02-2008 11:00Stack-based buffer overflow in the ClientConnection::NegotiateProtocolVersion function in vncviewer/ClientConnection.cpp in vncviewer for UltraVNC 1.0.2 and 1.0.4 before 01252008, when in LISTENING mode or when using the DSM plugin, allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a modified size value.CVE-2008-5001ultravncultravnc5.59%17y ago10-11-2008 11:00Multiple stack-based buffer overflows in multiple functions in vncviewer/FileTransfer.cpp in vncviewer for UltraVNC 1.0.2 and 1.0.4 before 01252008, when in LISTENING mode or when using the DSM plugin, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified parameters, a different issue than CVE-2008-0610.CVE-2022-24750ultravncultravnc+10.27%4y ago10-03-2022 00:00UltraVNC is a free and open source remote pc access software. A vulnerability has been found in versions prior to 1.3.8.0 in which the DSM plugin module, which allows a local authenticated user to achieve local privilege escalation (LPE) on a vulnerable system. The vulnerability has been fixed to allow loading of plugins from the installed directory. Affected users should upgrade their UltraVNC to 1.3.8.1. Users unable to upgrade should not install and run UltraVNC server as a service. It is advisable to create a scheduled task on a low privilege account to launch WinVNC.exe instead. There are no known workarounds if winvnc needs to be started as a service.CVE-2010-5248ultravncultravnc0.40%14y ago07-09-2012 10:00Untrusted search path vulnerability in UltraVNC 1.0.8.2 allows local users to gain privileges via a Trojan horse vnclang.dll file in the current working directory, as demonstrated by a directory that contains a .vnc file. NOTE: some of these details are obtained from third party information.

All vulnerabilities intightvnc ultravnc

CVE-2009-0388: tightvnc Numeric Errors

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References