Lucene search

K
cve[email protected]CVE-2008-1801
HistoryMay 12, 2008 - 4:20 p.m.

CVE-2008-1801

2008-05-1216:20:00
CWE-189
web.nvd.nist.gov
33
cve-2008-1801
security
denial of service
remote code execution
iso_recv_msg
rdesktop 1.5.0
rdp
remote desktop protocol

7.3 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.959 High

EPSS

Percentile

99.4%

Integer underflow in the iso_recv_msg function (iso.c) in rdesktop 1.5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Remote Desktop Protocol (RDP) request with a small length field.

CPENameOperatorVersion
rdesktop:rdesktoprdesktopeq1.5.0

References

7.3 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.959 High

EPSS

Percentile

99.4%