UltraVNC on Windows can allow local malicious code execution

Summary

A weakness in UltraVNC on Windows can let hackers execute malicious code if they have local access to the computer. If an attacker takes advantage of this weakness, they could potentially install malware or make unauthorized changes. We recommend updating to a newer version of UltraVNC to fix this issue.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software

Vendor	Product	Affected versions	Fix available
uvnc	ultravnc	1.6.4.0	–

Original title

A weakness has been identified in UltraVNC 1.6.4.0 on Windows. This affects an unknown function in the library cryptbase.dll of the component Windows Service. This manipulation causes uncontrolled ...

Original description

A weakness has been identified in UltraVNC 1.6.4.0 on Windows. This affects an unknown function in the library cryptbase.dll of the component Windows Service. This manipulation causes uncontrolled search path. The attack requires local access. A high degree of complexity is needed for the attack. The exploitability is reported as difficult. The vendor was contacted early about this disclosure but did not respond in any way.

nvd CVSS2.0 6.0

nvd CVSS3.1 7.0

nvd CVSS4.0 7.3

Vulnerability type

CWE-426

CWE-427 Uncontrolled Search Path Element