Approved changes feed: RSS · Atom

cpe:2.3:a:tigervnc:tigervnc:1.1:beta1:*:*:*:*:*:*

part: a version: 1.1 update: beta1

VendorTigervnc (cfeed494-6cb8-5832-a4ff-8de23254b5cf)
ProductTigervnc (aeb8145d-c1a9-58c4-b121-243457c3bbf6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/tigervnc purl2cpe 2026-06-01 10:12:57.898564
pkg:deb/ubuntu/tigervnc purl2cpe 2026-06-01 10:12:57.898565
pkg:github/tigervnc/tigervnc purl2cpe 2026-06-01 10:12:57.898566
pkg:rpm/centos/tigervnc purl2cpe 2026-06-01 10:12:57.898568
pkg:rpm/fedora/tigervnc purl2cpe 2026-06-01 10:12:57.898569
pkg:rpm/opensuse/tigervnc purl2cpe 2026-06-01 10:12:57.898570
pkg:sourceforge/tigervnc purl2cpe 2026-06-01 10:12:57.898572

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-1775 vulnerable 2026-06-08 04:58:02.093565 Details available
The CSecurityTLS::processMsg function in common/rfb/CSecurityTLS.cxx in the vncviewer component in TigerVNC 1.1beta1 does not properly verify the server's X.509 certificate, which allows man-in-the-middle attackers to spoof a TLS VNC server via an arbitrary certificate.
Published: 2011-05-26T18:00:00.000Z
Updated: 2024-08-06T22:37:25.770Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.