CVE-2011-1165: David King Vino

Medium severity, CVSS 5.1. EPSS: 2.3% chance of exploitation in the next 30 days.

Vino, possibly before 3.2, does not properly document that it opens ports in UPnP routers when the "Configure network to automatically accept connections" setting is enabled, which might make it easier for remote attackers to perform further attacks.

Affected products

• David King Vino: up to and including 3.1.92; version 0.12 only; version 0.14 only; version 2.7 only; version 2.7.3 only; version 2.7.3.1 only; …

Published 2013-03-12. Last modified 2026-06-16.