Update: UltraVNC 1.4.3.6 and UltraVNC SC 1.4.3.6: viewtopic.php?t=37885
Important: Please update to latest version before to create a reply, a topic or an issue: viewtopic.php?t=37864

Join us on social networks and share our announcements:
- Website: https://uvnc.com/
- GitHub: https://github.com/ultravnc
- Mastodon: https://mastodon.social/@ultravnc
- Facebook: https://www.facebook.com/ultravnc1
- X/Twitter: https://twitter.com/ultravnc1
- Reddit community: https://www.reddit.com/r/ultravnc
- OpenHub: https://openhub.net/p/ultravnc

Hiding UltraVnc command line from task manager

Here you will find help for frequently asked questions as well as for your specific question
Post Reply
wssddc
8
8
Posts: 15
Joined: 2008-08-03 01:13

Hiding UltraVnc command line from task manager

Post by wssddc »

If I launch the viewer with credentials on the command line, they can be seen in task manager if you turn on display of that column. Generally this is harmless, but in some cases it might be bad. I found a suggestion to prepend a large number of blanks before the command line parameters. This overflows the display in task manager, hiding the parameters. (I'm launching the viewer from a Qt program.)

250 blanks crashes the viewer on startup, but around 220 is ok, as is distributing a larger number of blanks between non-sensitive parameters before the credentials.

Question is, with a large number of blanks, but not enough to trigger an immediate crash, am I overwriting something that might cause later problems? A crash that can be triggered by malformed input is often the first step towards an exploit, but given how the viewer is used, I don't see much danger here.

Thanks.
Post Reply