Think of it this way. Is browsing to a random HTTP address via IP on the internet and then screencapping the picture produced on your browser legal?
Then using a VNC client in the same way would fall under the same legal purview. I think as long as there is no interaction to carry out functions, attempt password/username combos, then it's fairgame.