CVE-2012-4429

CVE-2012-4429 is a medium-severity vulnerability in David King Vino with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-200.

Key facts

• Severity: Medium (CVSS 2.0 base score 5.0)
• EPSS exploit prediction: 2% (82nd percentile)
• Actively exploited: Not listed in CISA KEV
• Weakness: CWE-200
• Affected product: David King Vino
• Published: 2012-10-01
• Last modified: 2026-06-16

Description

Vino 2.28, 2.32, 3.4.2, and earlier allows remote attackers to read clipboard activity by listening on TCP port 5900.

Frequently asked questions

What is CVE-2012-4429?

Vino 2.28, 2.32, 3.4.2, and earlier allows remote attackers to read clipboard activity by listening on TCP port 5900.

How severe is CVE-2012-4429?

CVE-2012-4429 has a CVSS 2.0 base score of 5.0, rated medium severity.

Is CVE-2012-4429 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (82nd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2012-4429?

CVE-2012-4429 primarily affects David King Vino. In total, 107 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2012-4429?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2012-4429 published?

CVE-2012-4429 was published on 2012-10-01 and last updated on 2026-06-16.

References

• http://rhn.redhat.com/errata/RHSA-2013-0169.html
• http://secunia.com/advisories/50527
• http://www.openwall.com/lists/oss-security/2012/09/13/25
• http://www.openwall.com/lists/oss-security/2012/09/14/1
• http://www.securityfocus.com/bid/55548
• http://www.ubuntu.com/usn/USN-1701-1
• https://exchange.xforce.ibmcloud.com/vulnerabilities/78602

Affected products (107)

• cpe:2.3:a:david_king:vino:*:*:*:*:*:*:*:*
• cpe:2.3:a:david_king:vino:0.12:*:*:*:*:*:*:*
• cpe:2.3:a:david_king:vino:0.14:*:*:*:*:*:*:*
• cpe:2.3:a:david_king:vino:2.7:*:*:*:*:*:*:*
• cpe:2.3:a:david_king:vino:2.7.3:*:*:*:*:*:*:*
• cpe:2.3:a:david_king:vino:2.7.3.1:*:*:*:*:*:*:*
• cpe:2.3:a:david_king:vino:2.7.4:*:*:*:*:*:*:*
• cpe:2.3:a:david_king:vino:2.7.90:*:*:*:*:*:*:*
• cpe:2.3:a:david_king:vino:2.7.91:*:*:*:*:*:*:*
• cpe:2.3:a:david_king:vino:2.7.92:*:*:*:*:*:*:*
• cpe:2.3:a:david_king:vino:2.8:*:*:*:*:*:*:*
• cpe:2.3:a:david_king:vino:2.8.0:*:*:*:*:*:*:*
• cpe:2.3:a:david_king:vino:2.8.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:david_king:vino:2.8.1:*:*:*:*:*:*:*
• cpe:2.3:a:david_king:vino:2.9:*:*:*:*:*:*:*
• cpe:2.3:a:david_king:vino:2.9.2:*:*:*:*:*:*:*
• cpe:2.3:a:david_king:vino:2.10:*:*:*:*:*:*:*
• cpe:2.3:a:david_king:vino:2.11:*:*:*:*:*:*:*
• cpe:2.3:a:david_king:vino:2.11.1:*:*:*:*:*:*:*
• cpe:2.3:a:david_king:vino:2.11.1.1:*:*:*:*:*:*:*
• cpe:2.3:a:david_king:vino:2.11.1.2:*:*:*:*:*:*:*
• cpe:2.3:a:david_king:vino:2.11.90:*:*:*:*:*:*:*
• cpe:2.3:a:david_king:vino:2.11.92:*:*:*:*:*:*:*
• cpe:2.3:a:david_king:vino:2.12:*:*:*:*:*:*:*
• cpe:2.3:a:david_king:vino:2.13:*:*:*:*:*:*:*
• cpe:2.3:a:david_king:vino:2.13.5:*:*:*:*:*:*:*
• cpe:2.3:a:david_king:vino:2.14:*:*:*:*:*:*:*
• cpe:2.3:a:david_king:vino:2.15:*:*:*:*:*:*:*
• cpe:2.3:a:david_king:vino:2.16:*:*:*:*:*:*:*
• cpe:2.3:a:david_king:vino:2.17:*:*:*:*:*:*:*
• cpe:2.3:a:david_king:vino:2.17.2:*:*:*:*:*:*:*
• cpe:2.3:a:david_king:vino:2.17.4:*:*:*:*:*:*:*
• cpe:2.3:a:david_king:vino:2.17.5:*:*:*:*:*:*:*
• cpe:2.3:a:david_king:vino:2.17.92:*:*:*:*:*:*:*
• cpe:2.3:a:david_king:vino:2.18:*:*:*:*:*:*:*
• cpe:2.3:a:david_king:vino:2.18.1:*:*:*:*:*:*:*
• cpe:2.3:a:david_king:vino:2.19:*:*:*:*:*:*:*
• cpe:2.3:a:david_king:vino:2.19.5:*:*:*:*:*:*:*
• cpe:2.3:a:david_king:vino:2.19.90:*:*:*:*:*:*:*
• cpe:2.3:a:david_king:vino:2.19.92:*:*:*:*:*:*:*

More vulnerabilities in David King Vino

• CVE-2013-5745 — High (CVSS 7.1): The vino_server_client_data_pending function in vino-server.c in GNOME Vino 2.26.1, 2.32.1, 3.7.3, and earlier, and 3.8…
• CVE-2011-1165 — Medium (CVSS 5.1): Vino, possibly before 3.2, does not properly document that it opens ports in UPnP routers when the "Configure network…
• CVE-2011-1164 — Medium (CVSS 4.6): Vino before 2.99.4 can connect external networks contrary to the statement in the vino-preferences dialog box, which…
• CVE-2011-0905 — Low (CVSS 3.5): The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3,…
• CVE-2011-0904 — Low (CVSS 3.5): The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3,…

All CVEs affecting David King Vino →

Other CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor) vulnerabilities

• CVE-2026-27604 — Critical (CVSS 10.0): FOSSBilling is a free, open-source billing and client management system. Starting in version 0.5.4 and prior to version…
• CVE-2026-40965 — Critical (CVSS 10.0): Cloud Foundry UAA versions v76.12.0 through v78.12.0 are vulnerable to a private key exposure. The server contains a…
• CVE-2026-42826 — Critical (CVSS 10.0): Exposure of sensitive information to an unauthorized actor in Azure DevOps allows an unauthorized attacker to disclose…
• CVE-2025-29270 — Critical (CVSS 10.0): Incorrect access control in the realtime.cgi endpoint of Deep Sea Electronics devices DSE855 v1.1.0 to v1.1.26 allows…
• CVE-2025-61481 — Critical (CVSS 10.0): An issue in MikroTik RouterOS v.7.14.2 and SwOS v.2.18 exposes the WebFig management interface over cleartext HTTP by…
• CVE-2025-53624 — Critical (CVSS 10.0): The Docusaurus gists plugin adds a page to your Docusaurus instance, displaying all public gists of a GitHub user.…

Browse all CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor) vulnerabilities →