GCVE - cpe:2.3:a:tightvnc:tightvnc:1.3.10:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:tightvnc:tightvnc:1.3.10:*:*:*:*:*:*:*

part: a version: 1.3.10 update: *

Vendor	Tightvnc (`36386c57-edd2-5c79-8711-0bdc385f5334`)
Product	Tightvnc (`a2fc893b-ff89-555c-a7ef-fecadac5701d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/chenall/tightvnc`	purl2cpe	2026-06-01 10:18:03.159349
`pkg:github/landv/tightvnc`	purl2cpe	2026-06-01 10:18:03.159351
`pkg:github/markjandrews/tightvnc`	purl2cpe	2026-06-01 10:18:03.159352
`pkg:sourceforge/vnc-tight`	purl2cpe	2026-06-01 10:18:03.159354

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-8287`	vulnerable	2026-06-08 05:14:23.812580	Details available TightVNC code version 1.3.10 contains global buffer overflow in HandleCoRREBBP macro function, which can potentially result code execution. This attack appear to be exploitable via network connectivity. Published: 2019-10-29T16:43:30.000Z Updated: 2024-08-04T21:17:31.162Z Open on db.gcve.eu Reference links https://www.openwall.com/lists/oss-security/2018/12/10/5 https://lists.debian.org/debian-lts-announce/2019/12/msg00028.html https://cert-portal.siemens.com/productcert/pdf/ssa-478893.pdf https://us-cert.cisa.gov/ics/advisories/icsa-20-343-08	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-15680`	vulnerable	2026-06-08 05:12:57.772654	Details available TightVNC code version 1.3.10 contains null pointer dereference in HandleZlibBPP function, which results Denial of System (DoS). This attack appear to be exploitable via network connectivity. Published: 2019-10-29T16:45:52.000Z Updated: 2024-08-05T00:56:22.088Z Open on db.gcve.eu Reference links https://www.openwall.com/lists/oss-security/2018/12/10/5 https://lists.debian.org/debian-lts-announce/2019/12/msg00028.html https://usn.ubuntu.com/4407-1/ https://cert-portal.siemens.com/productcert/pdf/ssa-478893.pdf https://us-cert.cisa.gov/ics/advisories/icsa-20-343-08	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-15679`	vulnerable	2026-06-08 05:12:57.772249	Details available TightVNC code version 1.3.10 contains heap buffer overflow in InitialiseRFBConnection function, which can potentially result code execution. This attack appear to be exploitable via network connectivity. Published: 2019-10-29T16:45:04.000Z Updated: 2024-08-05T00:56:22.416Z Open on db.gcve.eu Reference links https://www.openwall.com/lists/oss-security/2018/12/10/5 https://lists.debian.org/debian-lts-announce/2019/12/msg00028.html https://cert-portal.siemens.com/productcert/pdf/ssa-478893.pdf https://us-cert.cisa.gov/ics/advisories/icsa-20-343-08	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-15678`	vulnerable	2026-06-08 05:12:57.771545	Details available TightVNC code version 1.3.10 contains heap buffer overflow in rfbServerCutText handler, which can potentially result code execution.. This attack appear to be exploitable via network connectivity. Published: 2019-10-29T16:44:08.000Z Updated: 2024-08-05T00:56:22.434Z Open on db.gcve.eu Reference links https://www.openwall.com/lists/oss-security/2018/12/10/5 https://lists.debian.org/debian-lts-announce/2019/12/msg00028.html https://cert-portal.siemens.com/productcert/pdf/ssa-478893.pdf https://us-cert.cisa.gov/ics/advisories/icsa-20-343-08	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Tightvnc 1.3.10

Notes

PURL mappings

Vulnerability references

Contribute