PT-2014-3556 · Freerdp+3 · Freerdp+3

Hardening · Publicado 2014-07-08 · Atualizado 2024-06-15 · CVE-2014-0250

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions FreeRDP (affected versions not specified)

Description The issue is related to multiple integer overflows in the client/X11/xf graphics.c file of FreeRDP. This occurs when the width and height are passed to either the xf Pointer New or xf Bitmap Decompress function, resulting in an incorrect amount of memory being allocated. The impact of this issue is unspecified.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

ALT-PU-2015-1346

CVE-2014-0250

MGASA-2014-0287

OPENSUSE-SU-2024:10110-1

OPENSUSE-SU-2024:13816-1

SUSE-SU-2016:2506-1

USN-3380-1

Produtos afetados

Alt Linux

Freerdp

Suse

Ubuntu

Referências · 38

• https://github.com/FreeRDP/FreeRDP/issues/1871 · Aviso do Fabricante
• https://github.com/FreeRDP/FreeRDP/pull/1874 · Nota
• https://ubuntu.com/security/CVE-2017-2839 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-2835 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2013-4118 · Nota
• https://suse.com/support/update/announcement/2016/suse-su-20162506-1 · Nota
• http://lists.opensuse.org/opensuse-updates/2014-07/msg00008.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2023-40576 · Nota
• http://seclists.org/oss-sec/2014/q2/365 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:13816-1 · Aviso do Fabricante
• http://security.gentoo.org/glsa/glsa-201412-18.xml · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-0250 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-2834 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2014-0250 · Nota de Segurança
• https://ubuntu.com/security/CVE-2017-2838 · Aviso do Fabricante