CVE-2019-15680

Name of the Vulnerable Software and Affected Versions TightVNC version 1.3.10

Description The issue is related to a null pointer dereference in the HandleZlibBPP function, which can result in a Denial of System (DoS). This can be exploited via network connectivity, potentially allowing a remote attacker to cause a service disruption.

Recommendations For TightVNC version 1.3.10, consider disabling the HandleZlibBPP function as a temporary workaround until a patch is available. Restrict access to the network to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.