Unscored severity · published Dec 31, 2002
CVE-2002-1848
TightVNC before 1.2.4 running on Windows stores unencrypted passwords in the password text control of the WinVNC Properties dialog, which could allow local users to access…
–
CVSS
0.3%
EPSS
No
On KEV
Description
TightVNC before 1.2.4 running on Windows stores unencrypted passwords in the password text control of the WinVNC Properties dialog, which could allow local users to access passwords.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TI
Tightvnc · Tightvnc
1.2; 1.2.1; 1.2.2; 1.2.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1848
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1848
www.securityfocus.com
http://www.securityfocus.com/bid/4835
www.tightvnc.com
http://www.tightvnc.com/changelog-win32.html
More from Tightvnc
9.8
CVE-2021-42785
Buffer Overflow vulnerability in tvnviewer.exe of TightVNC Viewer allows a remote attacker to execute arbitrary instructions via a crafted FramebufferUpdate packet from a VNC…
9.8
CVE-2019-8287
TightVNC code version 1.3.10 contains global buffer overflow in HandleCoRREBBP macro function, which can potentially result code execution
9.8
CVE-2019-15679
TightVNC code version 1.3.10 contains heap buffer overflow in InitialiseRFBConnection function, which can potentially result code execution
9.8
CVE-2019-15678
TightVNC code version 1.3.10 contains heap buffer overflow in rfbServerCutText handler, which can potentially result code execution
9.0
CVE-2023-27830
TightVNC before v2.8.75 allows attackers to escalate privileges on the host operating system via replacing legitimate files with crafted files when executing a file transfer