Approved changes feed: RSS · Atom

cpe:2.3:a:tightvnc:tightvnc:1.3.9:*:*:*:*:*:*:*

part: a version: 1.3.9 update: *

VendorTightvnc (36386c57-edd2-5c79-8711-0bdc385f5334)
ProductTightvnc (a2fc893b-ff89-555c-a7ef-fecadac5701d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/chenall/tightvnc purl2cpe 2026-06-01 10:18:03.159355
pkg:github/landv/tightvnc purl2cpe 2026-06-01 10:18:03.159357
pkg:github/markjandrews/tightvnc purl2cpe 2026-06-01 10:18:03.159358
pkg:sourceforge/vnc-tight purl2cpe 2026-06-01 10:18:03.159359

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-0388 vulnerable 2026-06-08 04:51:09.223968 Details available
Multiple integer signedness errors in (1) UltraVNC 1.0.2 and 1.0.5 and (2) TightVnc 1.3.9 allow remote VNC servers to cause a denial of service (heap corruption and application crash) or possibly execute arbitrary code via a large length value in a message, related to the (a) ClientConnection::CheckBufferSize and (b) ClientConnection::CheckFileZipBufferSize functions in ClientConnection.cpp.
Published: 2009-02-04T19:00:00.000Z
Updated: 2024-08-07T04:31:25.854Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.