Unscored severity · published Dec 31, 2002
CVE-2002-1848
TightVNC before 1.2.4 running on Windows stores unencrypted passwords in the password text control of the WinVNC Properties dialog, which could allow local users to access…
–
CVSS
0.3%
EPSS
No
On KEV
Description
TightVNC before 1.2.4 running on Windows stores unencrypted passwords in the password text control of the WinVNC Properties dialog, which could allow local users to access passwords.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TI
Tightvnc · Tightvnc
1.2; 1.2.1; 1.2.2; 1.2.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1848
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1848
www.securityfocus.com
http://www.securityfocus.com/bid/4835
www.tightvnc.com
http://www.tightvnc.com/changelog-win32.html
More from Tightvnc
9.8
CVE-2021-42785
Buffer Overflow in tvnviewer.exe via Crafted Packet in TightVNC Viewer 2.8.59
9.8
CVE-2019-8287
TightVNC code version 1.3.10 contains global buffer overflow in HandleCoRREBBP macro function, which can potentially result code execution
9.8
CVE-2019-15679
TightVNC code version 1.3.10 contains heap buffer overflow in InitialiseRFBConnection function, which can potentially result code execution
9.8
CVE-2019-15678
TightVNC code version 1.3.10 contains heap buffer overflow in rfbServerCutText handler, which can potentially result code execution
9.1
CVE-2024-42049
TightVNC (Server for Windows) before 2.8.84 allows attackers to connect to the control pipe via a network connection