TightVNC Viewer Pre-Auth RCE: PoC Shows Remote Code Execution Risk
A newly disclosed vulnerability in the TightVNC Viewer allows attackers to execute code on Windows machines before a password prompt appears. Research credited to SeongJoon Cho of SSD Labs Korea includes proof-of-concept exploit code targeting TightVNC 2.8.88 x64. The flaw affects the viewer component and can be triggered when a viewer connects to a malicious server or when the viewer is reachable in Listening Mode. How the bug works The…