Unscored severity · published Sep 24, 2002
CVE-2002-0971
Vulnerability in VNC, TightVNC, and TridiaVNC allows local users to execute arbitrary code as LocalSystem by using the Win32 Messaging System to bypass the VNC GUI and access the…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Vulnerability in VNC, TightVNC, and TridiaVNC allows local users to execute arbitrary code as LocalSystem by using the Win32 Messaging System to bypass the VNC GUI and access the "Add new clients" dialogue box.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 34% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TI
Tightvnc · Tightvnc
1.2.0; 1.2.1; 1.2.5 · source: NVD
TR
Tridiavnc · Tridia
1.5; 1.5.1; 1.5.2; 1.5.4 · source: NVD
WS
Winvnc Server · Att
through 3.3.3_r9; 3.3.3_r7 · source: NVD