Search for packages
| purl | pkg:deb/debian/tightvnc@0?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-f36q-8kzn-2feb | TightVNC before v2.8.75 allows attackers to escalate privileges on the host operating system via replacing legitimate files with crafted files when executing a file transfer. This is due to the fact that TightVNC runs in the backend as a high-privileges account. |
CVE-2023-27830
|
| VCID-scrt-9r4x-tyb4 | Multiple integer signedness errors in (1) UltraVNC 1.0.2 and 1.0.5 and (2) TightVnc 1.3.9 allow remote VNC servers to cause a denial of service (heap corruption and application crash) or possibly execute arbitrary code via a large length value in a message, related to the (a) ClientConnection::CheckBufferSize and (b) ClientConnection::CheckFileZipBufferSize functions in ClientConnection.cpp. |
CVE-2009-0388
|
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-16T13:21:18.065611+00:00 | Debian Importer | Fixing | VCID-scrt-9r4x-tyb4 | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-16T12:17:23.902119+00:00 | Debian Importer | Fixing | VCID-f36q-8kzn-2feb | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-13T09:12:21.038276+00:00 | Debian Importer | Fixing | VCID-scrt-9r4x-tyb4 | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-13T08:24:17.421760+00:00 | Debian Importer | Fixing | VCID-f36q-8kzn-2feb | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-03T07:55:17.048224+00:00 | Debian Importer | Fixing | VCID-f36q-8kzn-2feb | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |
| 2026-04-03T07:55:16.598218+00:00 | Debian Importer | Fixing | VCID-scrt-9r4x-tyb4 | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |