PT-2026-6577 · Realvnc · Ultravnc Launcher

Chuyreds · Published 2026-02-05 · Updated 2026-02-05 · CVE-2020-37133

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions UltraVNC Launcher version 1.2.4.0

Description The software contains a denial of service issue in the Repeater Host configuration field. An attacker can cause the application to crash by providing an overly long string, specifically 300 characters, to the Repeater Host property. The vulnerable configuration field is the RepeaterHost property.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, avoid using or limit the length of input in the RepeaterHost property.

Exploit

Fix

DoS

Stack Overflow

Memory Corruption

Weakness Enumeration

CWE-121

CWE-787

Related Identifiers

CVE-2020-37133

Affected Products

Ultravnc Launcher

References · 6

• 🔥 https://exploit-db.com/exploits/48288 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-37133 · Security Note
• https://osv.dev/vulnerability/CVE-2020-37133 · Vendor Advisory
• https://t.me/CVEtracker/43825 · Telegram Post
• https://uvnc.com · Note
• https://vulncheck.com/advisories/ultravnc-launcher-repeaterhost-denial-of-service · Note