PT-2018-3041 · Freerdp+5 · Freerdp+5
Eyal Itkin
·
Publicado
2016-04-08
·
Atualizado
2024-06-15
·
CVE-2018-8788
CVSS v2.0
10
Crítica
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
FreeRDP versions prior to 2.0.0-rc4
Description
The issue is related to an Out-Of-Bounds Write of up to 4 bytes in the
nsc rle decode() function, resulting in memory corruption and potentially allowing for remote code execution. This can be exploited by a remote attacker to cause a denial of service or execute arbitrary code.Recommendations
For versions prior to 2.0.0-rc4, consider updating to version 2.0.0-rc4 or later to resolve the issue.
As a temporary workaround, consider restricting access to the
nsc rle decode() function until a patch is available.Exploit
Correção
RCE
Memory Corruption
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Freerdp
Red Hat
Suse
Ubuntu