PT-2026-6576

CVE-2020-37132

Published

2026-02-05

Updated

2026-02-05

Description by

CVSS 3.1

6.2

Medium

MetricsAV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions UltraVNC Launcher version 1.2.4.0

Description The software contains a denial of service condition in its password configuration. A local attacker can cause the application to crash by providing an overly long string, specifically 300 characters, as a password. This prevents normal launcher functionality.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Fix

Impacts

Researchers

Chuyreds

Vendors

Affected products

Weakness enumeration

CWE-121: Stack-based Buffer Overflow

CWE-787: Out-of-bounds Write