Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2020-37132

UltraVNC Launcher 1.2.4.0 - 'Password' Denial of Service

Description

UltraVNC Launcher 1.2.4.0 contains a denial of service vulnerability in its password configuration properties that allows local attackers to crash the application. Attackers can paste an overly long 300-character string into the password field to trigger an application crash and prevent normal launcher functionality.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

UltraVNC Team UltraVNC Launcher

  • 1.2.4.0affected

References