TightVNC Viewer < 1.3.10 Multiple Integer Overflows

High Nessus Plugin ID 35702


The remote Windows host has an application that is affected by multiple integer overflows.


The installed version of TightVNC Viewer is earlier than 1.3.10. Such versions reportedly miscalculate a buffer size on the heap. If an attacker can trick a user on the remote host into connecting to a malicious server, he can probably exploit this issue using specially crafted messages to execute code on the affected host subject to the user's privileges.


Upgrade to TightVNC 1.3.10 or later.

See Also




Plugin Details

Severity: High

ID: 35702

File Name: tightvnc_1_3_10.nasl

Version: $Revision: 1.8 $

Type: local

Agent: windows

Family: Windows

Published: 2009/02/18

Modified: 2015/01/12

Dependencies: 13855, 10456

Risk Information

Risk Factor: High


Base Score: 9.3

Temporal Score: 7.7

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:F/RL:OF/RC:C

Vulnerability Information

Required KB Items: SMB/Registry/Enumerated

Exploit Available: true

Exploit Ease: Exploits are available

Exploitable With

Core Impact

Reference Information

CVE: CVE-2009-0388

BID: 33568

OSVDB: 55423

CWE: 189