UltraVNC

[Ircus]

UltraVNC 1.8.3.0​

UltraVNC 1.8.3.0​

• novnc support multi monitors
• Fix to support realvnc viewer
• XZ encoders fix
• update translation
• Clipboard fix (html and bitmap)

Zaloguj lub Zarejestruj się aby zobaczyć!

 

[Ircus]

UltraVNC 1.8.3.1​

UltraVNC 1.8.3.1​

• Fix blank viewer on locked desktop for ExtendedDesktopSize clients
• Precision wheel extension #407, #406
• Use 32-bit alpha for RichCursor mask to fix faint cursor edges #336
• FileTransfer Delete Cancelation deletes file #405
• fix repetaer bug
• vncviewer: type the local clipboard as keystrokes (#404)

Zaloguj lub Zarejestruj się aby zobaczyć!

 

[Ircus]

UltraVNC 1.8.3.2​

-Security updates (viewer)
-Precision wheel extension (#407)
-Fix blank viewer on locked desktop for ExtendedDesktopSize clients
-Fix mismatching create directory buffer length between client and server (#409)
-Allow viewer to cancel a server-to-viewer file transfer
-harden buffer against overflow

Security: fix websocket overflow, file-transfer root gaps, retire MS-Logon II
- vnchttpconnect: unsigned WebSocket frame length check, reject MSB-set
64-bit lengths, cap control frames at 125 bytes (fixes heap overflow
reachable pre-auth on the HTTP port)
- vncclient: enforce FileTransferRoot on download, dir listing, mkdir,
delete and rename (was upload-only); reject '[ .. ]' dir names in
ZipPossibleDirectory
- vncclient: gate rfbFileChecksums on FT enabled + pending upload, free
prior m_lpCSBuffer, bound length by file size
- vncclient: view-only clients can no longer write the server clipboard
or change display resolution
- retire MS-Logon II (31-bit DH, time-seeded rand): no longer advertised,
legacy viewers get an upgrade message via AuthMsLogonReject
- vncauth: challenge bytes from BCryptGenRandom instead of rand()
- setpasswd: random passwords from BCryptGenRandom with rejection
sampling instead of rand() seeded by install time
- TextChat: reject negative chat lengths as protocol errors
- DSMPlugin: load plugin only from the exe dir via LoadLibraryEx with
LOAD_LIBRARY_SEARCH flags; reject names with path separators
- rdr/ZstdInStream: throw on zero decompression progress (viewer DoS)
- repeater: Mode 1 allow-list uses exact resolved-IP match (was strstr
prefix, allowed e.g. 10.0.0.150 when 10.0.0.1 was listed); refuse list
exact IP match
- repeater: do_repeater uses stack fd_set (FD_ALLOC under-allocated and
leaked on Windows)

Zaloguj lub Zarejestruj się aby zobaczyć!