RealVNC version 4.1.1 suffers from a remote compromise flaw due to handing authentication duties client-side.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/46447/realvnc411.txt
Source: https://packetstormsecurity.com/files/46447/realvnc411.txt.html