PatchTheCVErealvnc vulnerabilities and fixes
Recent CVEs affecting realvnc, with upgrade or downgrade steps. 4 tracked.
realvnc has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2013-12-28. Highest priority: CVE-2008-4770 (score 58/100).
- CVE-2013-6886 HIGH 7.2 DOWNGRADE RealVNC VNC 5.0.6 on Mac OS X, Linux, and UNIX allows local users to gain privileges via a crafted argument to
- CVE-2008-4770 HIGH 10.0 DOWNGRADE The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0 through 4.1.2, E
- CVE-2006-2369 HIGH 7.5 DOWNGRADE RealVNC 4.1.1, and other products that use RealVNC such as AdderLink IP and Cisco CallManager, allows remote a
- CVE-2004-1750 MEDIUM 5.0 DOWNGRADE RealVNC 4.0 and earlier allows remote attackers to cause a denial of service (crash) via a large number of con
FAQ
How do I fix realvnc vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is realvnc being exploited right now?
None of the tracked realvnc CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which realvnc CVE should I patch first?
CVE-2008-4770 currently ranks highest (58/100): The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0 through 4.1.2, E.