PT-2023-4670 · Freerdp+8 · Freerdp+8
Pwn2Carr
·
Publicado
2023-07-28
·
Atualizado
2025-04-10
·
CVE-2023-39356
CVSS v3.1
9.1
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
FreeRDP versions prior to 2.11.0
FreeRDP versions prior to 3.0.0-beta3
Description
The issue is related to a missing offset validation in the
gdi multi opaque rect function, which can lead to an Out Of Bound Read error. This occurs when the value of multi opaque rect->numRectangles is not properly validated, allowing for looping through multi opaque rect->numRectangles without boundary checks. This can result in a crash.Recommendations
For versions prior to 2.11.0, upgrade to version 2.11.0 or later.
For versions prior to 3.0.0-beta3, upgrade to version 3.0.0-beta3 or later.
As a temporary workaround, consider restricting access to the
gdi multi opaque rect function until a patch is available.
Avoid using the multi opaque rect->numRectangles variable in the affected function without proper boundary checks until the issue is resolved.Exploit
Correção
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Almalinux
Astra Linux
Debian
Freerdp
Linuxmint
Red Hat
Suse
Ubuntu