CVE-2002-0971: Medium severity Tridia TridiaVNC vulnerability
Vulnerability in VNC, TightVNC, and TridiaVNC allows local users to execute arbitrary code as LocalSystem by using the Win32 Messaging System to bypass the VNC GUI and access the "Add new clients" dialogue box.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0971?
CVE-2002-0971 is considered a critical vulnerability that allows local users to execute arbitrary code as LocalSystem.
How do I fix CVE-2002-0971?
To fix CVE-2002-0971, update to a patched version of the affected VNC distributions, specifically ensuring all software is at its latest version.
Which versions of VNC are affected by CVE-2002-0971?
CVE-2002-0971 affects specific versions of TridiaVNC, TightVNC, and UltraVNC, including TightVNC 1.2.0, 1.2.1, and 1.2.5, among others.
Who is vulnerable to CVE-2002-0971?
Local users with access to the systems running affected versions of VNC can exploit CVE-2002-0971.
What is the impact of exploiting CVE-2002-0971?
Exploitation of CVE-2002-0971 allows an attacker to run arbitrary code with SYSTEM privileges, potentially compromising the entire system.