|
|
AT&T WinVNC Client Buffer Overflow Vulnerability
|
Bugtraq ID:
|
2305
|
|
Class:
|
Boundary Condition Error
|
|
CVE:
|
CVE-2001-0167
|
|
Remote:
|
Yes
|
|
Local:
|
No
|
|
Published:
|
Jan 29 2001 12:00AM
|
|
Updated:
|
Nov 02 2007 04:26PM
|
|
Credit:
|
This vulnerability was discovered by Emiliano Kargieman, Agustin Azubel, and Maximiliano Caceres of Core-SDI, and announced to Bugtraq a Core-SDI Security Advisory on January 29, 2001.
|
|
Vulnerable:
|
AT&T WinVNC Client 3.3.3 r7
-
Microsoft Windows 2000 Professional
-
Microsoft Windows 98SE
-
Microsoft Windows ME
-
Microsoft Windows NT 4.0
AT&T WinVNC 3.3.3 r9
|
|
|
|
Not Vulnerable:
|
|
|

|