CVE-2019-25600

Name of the Vulnerable Software and Affected Versions UltraVNC Viewer version 1.2.2.4

Description A denial of service issue exists where attackers can crash the application by supplying an oversized string to the VNC Server input field. By pasting a malicious string containing 256 repeated characters into the VNC Server field and clicking Connect, a buffer overflow is triggered, causing the viewer to crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.