Kaspersky TightVNC
4 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2019-15680 | 1.3.10 | TightVNC code version 1.3.10 contains null pointer dereference in HandleZlibBPP function, which results Denial of System (DoS). This attack | HIGH 7.5 | 2.7 % | ||
| CVE-2019-15679 | 1.3.10 | TightVNC code version 1.3.10 contains heap buffer overflow in InitialiseRFBConnection function, which can potentially result code execution. | CRITICAL 9.8 | 12 % | ||
| CVE-2019-15678 | 1.3.10 | TightVNC code version 1.3.10 contains heap buffer overflow in rfbServerCutText handler, which can potentially result code execution.. This a | CRITICAL 9.8 | 13 % | ||
| CVE-2019-8287 | 1.3.10 | TightVNC code version 1.3.10 contains global buffer overflow in HandleCoRREBBP macro function, which can potentially result code execution. | CRITICAL 9.8 | 19 % |