← All CVEs

CVE-2001-0167

high · 7.6

Buffer overflow in AT&T WinVNC (Virtual Network Computing) client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnFailed packet with a long reason string.

7.6
CVSS
50.8%
EPSS (exploit prob.)
99th
EPSS percentile
2001-05-03
Published

AV:N/AC:H/Au:N/C:C/I:C/A:C

Affected products

VendorProductAffected versions
attwinvnc<= 3.3.3r7

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2001-0167