PT-2014-3556 · Freerdp+3 · Freerdp+3

Hardening · Published 2014-07-08 · Updated 2024-06-15 · CVE-2014-0250

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions FreeRDP (affected versions not specified)

Description The issue is related to multiple integer overflows in the client/X11/xf graphics.c file of FreeRDP. This occurs when the width and height are passed to either the xf Pointer New or xf Bitmap Decompress function, resulting in an incorrect amount of memory being allocated. The impact of this issue is unspecified.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-189

Related Identifiers

ALT-PU-2015-1346

CVE-2014-0250

MGASA-2014-0287

OPENSUSE-SU-2024:10110-1

OPENSUSE-SU-2024:13816-1

SUSE-SU-2016:2506-1

USN-3380-1

Affected Products

Alt Linux

Freerdp

Suse

Ubuntu

References · 38

• https://github.com/FreeRDP/FreeRDP/issues/1871 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-2839 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-2835 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2014-07/msg00008.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:13816-1 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-201412-18.xml · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-0250 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-2834 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2014-0250 · Security Note
• https://ubuntu.com/security/CVE-2017-2838 · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-0250 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-0250 · Security Note
• https://advisories.mageia.org/MGASA-2014-0287.html · Security Note
• https://osv.dev/vulnerability/MGASA-2014-0287 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3380-1 · Vendor Advisory