ChangeIntel IT change radar

Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2019-25601

UltraVNC Launcher 1.2.2.4 Denial of Service Buffer Overflow

CVSS 4.0 6.9 MEDIUMCVSS 3.1 6.2 MEDIUMCheck source for fixed versionsKEV status unknown

Original advisory

Historical advisory recorded 23 Oct 2026 15:48:27 UTC. Read the latest advisory.

cve-program · CVE-2019-25601

Published

UltraVNC Launcher 1.2.2.4 contains a buffer overflow vulnerability in the Path vncviewer.exe property field that allows local attackers to crash the application by supplying an excessively long string. Attackers can input a 300-byte payload of repeated characters through the Properties dialog to trigger a denial of service condition.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2019-25601

Published

UltraVNC Launcher

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Uvnc",
                    "product": "UltraVNC Launcher",
                    "versions": [
                        {
                            "version": "1.2.2.4",
                            "status": "affected"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON