CVE-2001-0167: Att Winvnc

High severity, CVSS 7.6. EPSS: 50.8% chance of exploitation in the next 30 days.

Buffer overflow in AT&T WinVNC (Virtual Network Computing) client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnFailed packet with a long reason string.

Affected products

• Att Winvnc: up to and including 3.3.3r7

Published 2001-05-03. Last modified 2026-06-16.