critical9.0
CVE-2023-27830
TightVNC before v2.8.75 allows attackers to escalate privileges on the host operating system via replacing legitimate files with crafted files when executing a…
Impact
TightVNC before v2.8.75 allows attackers to escalate privileges on the host operating system via replacing legitimate files with crafted files when executing a file transfer. This is due to the fact that TightVNC runs in the backend as a high-privileges account.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tightvnc | Tightvnc | before 2.8.75 |
Weakness classification
References
- NVD record
- CVE.org record
- https://medium.com/nestedif/vulnerability-disclosure-privilege-escalation-tightvnc-8165208cce
- https://www.tightvnc.com/news.php
- https://www.tightvnc.com/whatsnew.php
- https://medium.com/nestedif/vulnerability-disclosure-privilege-escalation-tightvnc-8165208cce
- https://www.tightvnc.com/news.php
- https://www.tightvnc.com/whatsnew.php