Approved changes feed: RSS · Atom

cpe:2.3:a:att:winvnc:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAtt (0c9c2ccc-1044-53f8-b2c7-d3d3ec2b66bb)
ProductWinvnc (8407cef4-4c17-5eef-8ea7-faeb298c1560)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2001-1422 vulnerable 2026-06-03 14:26:12.483203 Details available
WinVNC 3.3.3 and earlier generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by sniffing the challenge and response of other users.
Published: 2005-03-20T05:00:00.000Z
Updated: 2024-08-08T04:58:09.599Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-0168 vulnerable 2026-06-03 14:26:01.106470 Details available
Buffer overflow in AT&T WinVNC (Virtual Network Computing) server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET request when the DebugLevel registry key is greater than 0.
Published: 2001-03-09T05:00:00.000Z
Updated: 2024-08-08T04:06:55.591Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-0167 vulnerable 2026-06-03 14:26:01.105885 Details available
Buffer overflow in AT&T WinVNC (Virtual Network Computing) client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnFailed packet with a long reason string.
Published: 2001-03-09T05:00:00.000Z
Updated: 2024-08-08T04:06:55.501Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.