RealVNC version 4.1.1 suffers from a remote compromise flaw due to handing authentication duties client-side.