VULNERABILITY INTELLIGENCE

CVE-2002-0971

CVSS score4.6 MEDIUM
EPSS probability0.40%
CISA KEVNot currently listed
Published2002-09-24
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P

Description

Vulnerability in VNC, TightVNC, and TridiaVNC allows local users to execute arbitrary code as LocalSystem by using the Win32 Messaging System to bypass the VNC GUI and access the "Add new clients" dialogue box.

Primary references