UltraVNC

Hello,

because I don't fully understand the technical details, I'd like to ask, if UltraVNC (Server or Viewer + "/listen") is vulnerable for CVE-2023-23415 in an unpatched Windows. It sounds quite dangerous...

Rudi De Vos wrote: 2020-01-05 16:19 Add the 2 files to the UltraVNC Server sub-project

I thought I did this... Sorry, now UltraVNC SC compiles without errors. Thank you. Didn't test any further. When I have more time I continue.

Thanks for working on the code and sharing.
In the last days I tried to compile the 2019 source, but always get errors. I tried several things, cleaned up the directories and so on, but without success.
For many years now I always got it to work, in the last years with the 2015 source. There are ...

After a long time I just wanted to look for new downloads, but:

http://www.uvnc.com -> white page and "Please enable / Bitte aktiviere JavaScript!"
WTF? No other info w/o JS? No serious page does that! UVNC looses trust.

Our version ( online created) get signed to overcome this issue
I don't have a certificate and don't want to spent money for nothing but MSs new nonsense. Is there a way to sign the exe without having an own certificate?
Did you already tried by presetting an encoder instaed of the auto mode ...

There's a similar problem here. I compiled SC to run directly without helpdesk.txt, so no file in %temp% has to be executed, because it is (and should be) forbidden per Software Restriction Policies. This worked fine until Windows 7. But how can I avoid the IE/Edge-problem?

2nd question: I just ...

Rudi De Vos wrote:see
http://www.naughter.com/dtwinver.html

Thank you. I read, tried to understand and change test.cpp for a while, but the differences of the new dtwinver-files are too big for me. I give up and stay without seeing the correct OS as before.

Hi,
I tried to extend Dtwinver.cpp with

BOOL COSVersion::IsWindowsWin8(LPOS_VERSION_INFO lpVersionInformation)
{
return (lpVersionInformation->UnderlyingPlatform == WindowsNT &&
lpVersionInformation->dwUnderlyingMajorVersion == 6 &&
lpVersionInformation->dwUnderlyingMinorVersion == 2);
}

BOOL ...

I've already changed the source for my wishes and I'm wondering, if it would it be a big disadvantage, if the dsmplugin would compiled into the winvnc.exe. It seems, it's not a lot of source...
Do you think it's worth trying it?

Until now I only share the one winvnc.exe, no helpdesk.txt or others ...

This is exact the same for the full and SC version if you run it on the same hardware and OS
with the same capture method ( mirror driver/alpha blending on/off)
But it looks definitely different!
Even when there's no screen change(!), the mouse is flickering permanently - only in SC.

In full ...

Sorry but I didn't understand, why only SC has this cursor-issue and not the normal version?!? The latter doesn't act slower, independent of any settings and the cursor is calm.
Already last year I searched through the code and compared the versions but without success. What is the critical section ...

Links is OK, when you click on it the download the zip ?
Yes, thank you.
Cursor flicker when you capture alpha blending, the merging of the layers cause it.
You can disable that SC auto capture alpha blending, but without you don't see semi transparent
desktop parts.
It seems, there must be ...

I tried to download the SC-Source but the link
http://www.uvnc.eu/download/Z_SC_2013.zip
isn't working. What's the right URL?

And another question: with SC, the mouse cursor on the host is flickering annoyingly. With normal Ultra-VNC the cursor keeps calm. I didn't find the location in the source ...

I found a solution.

Line 276 in vncdesktop.cpp:
!g_wallpaper_enabled ? (CAPTUREBLT | SRCCOPY) : SRCCOPY);
changed to
CAPTUREBLT | SRCCOPY);

Are there side effects to be expected?

When another window or the mouse is moved over the transparent area, it is visible for a ahort time, but disappears quickly.

I tried:
m_fCaptureAlphaBlending = true;
m_fBlackAlphaBlending = true;
in vncserver.cpp but no change...

For several purposes I use transparent areas to show some information or do some actions with a AutoHotKey-script like this (under WinXP SP3):
Gui,1: -Caption +Resize +MinSize100x50 +LastFound +ToolWindow
Gui,1: Color, EEAA99
Gui,1: Add,Text,cred x0 y5, visible Text!!!
Gui,1: Show,x100 y100
WinSet ...

I am missing a link to the source code. Where can it be downloaded?

No idea?

After updating to the actual SC-Version there are a few problems/questions:
The Start-Button [TEXTBUTTON] doesn't do anything. Users always have to doubleclick the connection. Is this a bug?

In an old Version I simplified the GUI to
(TitleBar)
..............----Text "Connect to Support"----
Button ...

Post moved to [topic=18768][/topic]