PT-2018-2491 · Freerdp+5 · Freerdp+5
Eyal Itkin
·
Publicado
2016-04-08
·
Atualizado
2024-06-15
·
CVE-2018-8786
CVSS v2.0
10
Crítica
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
FreeRDP versions prior to 2.0.0-rc4
Description
The issue is caused by an integer truncation leading to a heap-based buffer overflow in the
update read bitmap update() function, resulting in memory corruption and potentially allowing remote code execution. Exploitation of this issue may allow a remote attacker to execute arbitrary code or cause a denial of service.Recommendations
For versions prior to 2.0.0-rc4, update to version 2.0.0-rc4 or later to resolve the issue. As a temporary workaround, consider disabling the
update read bitmap update() function until a patch is available.Exploit
Correção
RCE
Buffer Overflow
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Freerdp
Red Hat
Suse
Ubuntu