Lucene search

K
cveMitreCVE-2011-0900
HistoryFeb 07, 2011 - 9:00 p.m.

CVE-2011-0900

2011-02-0721:00:16
CWE-119
mitre
web.nvd.nist.gov
27
cve
buffer overflow
tsclient
remote code execution
security vulnerability

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

8.2

Confidence

Low

EPSS

0.078

Percentile

94.2%

Stack-based buffer overflow in the tsc_launch_remote function (src/support.c) in Terminal Server Client (tsclient) 0.150, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a .RDP file with a long hostname argument.

Affected configurations

Nvd
Node
erick_woodsterminal_server_clientMatch0.150
VendorProductVersionCPE
erick_woodsterminal_server_client0.150cpe:2.3:a:erick_woods:terminal_server_client:0.150:*:*:*:*:*:*:*

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

8.2

Confidence

Low

EPSS

0.078

Percentile

94.2%