Skip to content

CVE-2001-0167

Buffer overflow in AT&T WinVNC (Virtual Network Computing) client 3.3.3r7 and earlier allows...

7.6 HighPublic exploit

CVE-2001-0167 is a high vulnerability (CVSS 7.6) in Att Winvnc, published March 9, 2001. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 50.8%, the 98th percentile. No source names a fixed version.

Buffer overflow in AT&T WinVNC (Virtual Network Computing) client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnFailed packet with a long reason string.

Exploit likelihood

50.8%Down 20.2 points since Feb 4, 2022

What each source reports

NVD Score used 7.6

Buffer overflow in AT&T WinVNC (Virtual Network Computing) client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnFailed packet with a long reason string.

Record: CVE-2001-0167
CVSS 2.0: 7.6 HighAV:N/AC:H/Au:N/C:C/I:C/A:C
Updated: 2026-11-02

CVE List No score

Buffer overflow in AT&T WinVNC (Virtual Network Computing) client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnFailed packet with a long reason string.

Record: CVE-2001-0167
Updated: 2026-11-02

EUVDEUVD-2001-0167 No score

Buffer overflow in AT&T WinVNC (Virtual Network Computing) client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnFailed packet with a long reason string.

Record: EUVD-2001-0167
Updated: 2026-11-03

GitHub AdvisoriesGHSA-7vvv-c5q6-4rvq No score

Buffer overflow in AT&T WinVNC (Virtual Network Computing) client 3.3.3r7 and earlier allows...

Buffer overflow in AT&T WinVNC (Virtual Network Computing) client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnFailed packet with a long reason string.

Record: GHSA-7vvv-c5q6-4rvq
Updated: 2026-11-02

Affected products

att winvnc

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	RealVNC 3.3.7 - Client Buffer Overflow (Metasploit)	2010-04-30
Metasploit	RealVNC 3.3.7 Client Buffer Overflow	2001-01-29

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD

References