[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ftUbXfNh-sAV6Y8eRXKiI6rgxtSW7w7Zxl7wDwUtX5Qw":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":34,"kevVulnerabilities":78,"topProductsByCves":79,"seoMetadata":84,"meta":93},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":33},33045,"ultravnc",4,7,0,12,"2016-08-25","u",[16,21,25,29],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":20},166690,8,5,"2012-09-07",{"id":22,"product_name":23,"version_count":24,"cve_count":24,"kev_count":11,"last_cve_update":13},166688,"repeater",1,{"id":26,"product_name":27,"version_count":24,"cve_count":24,"kev_count":11,"last_cve_update":28},166689,"tabbed_viewer","2006-04-06",{"id":30,"product_name":31,"version_count":32,"cve_count":24,"kev_count":11,"last_cve_update":28},166691,"vnc_viewer",2,"Ultravnc is a technology vendor with 4 tracked products and 7 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[35,43,49,55,60,65,72],{"cveId":36,"description":37,"publishedDate":28,"cvssScore":38,"cvssVersion":39,"severity":40,"isKev":41,"epssScore":42},"CVE-2006-1652","Multiple buffer overflows in (a) UltraVNC (aka Ultr@VNC) 1.0.1 and earlier and (b) tabbed_viewer 1.29 (1) allow user-assisted remote attackers to execute arbitrary code via a malicious server that sends a long string to a client that connects on TCP port 5900, which triggers an overflow in Log::ReallyPrint; and (2) allow remote attackers to cause a denial of service (server crash) via a long HTTP GET request to TCP port 5800, which triggers an overflow in VNCLog::ReallyPrint.",9,"v2","Critical",false,0.68036,{"cveId":44,"description":45,"publishedDate":46,"cvssScore":47,"cvssVersion":39,"severity":40,"isKev":41,"epssScore":48},"CVE-2008-0610","Stack-based buffer overflow in the ClientConnection::NegotiateProtocolVersion function in vncviewer\u002FClientConnection.cpp in vncviewer for UltraVNC 1.0.2 and 1.0.4 before 01252008, when in LISTENING mode or when using the DSM plugin, allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a modified size value.","2008-02-06",9.3,0.38757,{"cveId":50,"description":51,"publishedDate":52,"cvssScore":53,"cvssVersion":39,"severity":40,"isKev":41,"epssScore":54},"CVE-2009-0388","Multiple integer signedness errors in (1) UltraVNC 1.0.2 and 1.0.5 and (2) TightVnc 1.3.9 allow remote VNC servers to cause a denial of service (heap corruption and application crash) or possibly execute arbitrary code via a large length value in a message, related to the (a) ClientConnection::CheckBufferSize and (b) ClientConnection::CheckFileZipBufferSize functions in ClientConnection.cpp.","2009-02-04",10,0.13334,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":47,"cvssVersion":39,"severity":40,"isKev":41,"epssScore":59},"CVE-2008-5001","Multiple stack-based buffer overflows in multiple functions in vncviewer\u002FFileTransfer.cpp in vncviewer for UltraVNC 1.0.2 and 1.0.4 before 01252008, when in LISTENING mode or when using the DSM plugin, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified parameters, a different issue than CVE-2008-0610.","2008-11-10",0.05587,{"cveId":61,"description":62,"publishedDate":63,"cvssScore":53,"cvssVersion":39,"severity":40,"isKev":41,"epssScore":64},"CVE-2006-2206","The MS-Logon authentication scheme in UltraVNC (aka Ultr@VNC) 1.0.1 uses weak encryption (XOR) for challenge\u002Fresponse, which allows remote attackers to gain privileges by sniffing and decrypting passwords.","2006-05-05",0.02141,{"cveId":66,"description":67,"publishedDate":13,"cvssScore":68,"cvssVersion":69,"severity":70,"isKev":41,"epssScore":71},"CVE-2016-5673","UltraVNC Repeater before 1300 does not restrict destination IP addresses or TCP ports, which allows remote attackers to obtain open-proxy functionality by using a :: substring in between the IP address and port number.",7.5,"v3.0","High",0.01871,{"cveId":73,"description":74,"publishedDate":20,"cvssScore":75,"cvssVersion":39,"severity":76,"isKev":41,"epssScore":77},"CVE-2010-5248","Untrusted search path vulnerability in UltraVNC 1.0.8.2 allows local users to gain privileges via a Trojan horse vnclang.dll file in the current working directory, as demonstrated by a directory that contains a .vnc file.  NOTE: some of these details are obtained from third party information.",6.9,"Medium",0.00399,[],[80,81,82,83],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":20},{"id":22,"product_name":23,"version_count":24,"cve_count":24,"kev_count":11,"last_cve_update":13},{"id":26,"product_name":27,"version_count":24,"cve_count":24,"kev_count":11,"last_cve_update":28},{"id":30,"product_name":31,"version_count":32,"cve_count":24,"kev_count":11,"last_cve_update":28},{"title":85,"metaDescription":86,"keywords":87,"structuredData":88},"Ultravnc - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Ultravnc covering 4 products with 7 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Ultravnc vulnerabilities, Ultravnc security, Ultravnc CVE, Ultravnc threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":89,"@type":90,"name":91,"description":86,"url":92},"https:\u002F\u002Fschema.org","Organization","Ultravnc","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fultravnc",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":94,"apiVersion":95},"2026-10-20T06:32:13.154Z","3.0"]