4753 matches found
CVE-2018-8787
CVE-2018-8787 affects FreeRDP prior to 2.0.0-rc4. It describes an Integer Overflow in gdi_Bitmap_Decompress() that leads to a heap-based memory corruption with potential remote code execution. Remediation is to upgrade to FreeRDP 2.0.0-rc4 or newer (as referenced by linked advisories). The vulner...
CVE-2018-8786
FreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based Buffer Overflow in function updatereadbitmapupdate and results in a memory corruption and probably even a remote code execution...
CVE-2018-8787
FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdiBitmapDecompress and results in a memory corruption and probably even a remote code execution...
CVE-2018-8785
FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfxdecompress that results in a memory corruption and probably even a remote code execution...
CVE-2018-8786
FreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based Buffer Overflow in function updatereadbitmapupdate and results in a memory corruption and probably even a remote code execution...
CVE-2018-8787
FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdiBitmapDecompress and results in a memory corruption and probably even a remote code execution...
CVE-2018-8788
CVE-2018-8788 affects FreeRDP prior to 2.0.0-rc4, with an out-of-bounds write of up to 4 bytes in nsc_rle_decode() that can cause memory corruption and potentially remote code execution. Several advisories confirm the issue and list updates/patches (e.g., freerdp updates in CentOS/Red Hat/Mageia/...
CVE-2018-8785
FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfxdecompress that results in a memory corruption and probably even a remote code execution...
CVE-2018-8787
FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdiBitmapDecompress and results in a memory corruption and probably even a remote code execution...
CVE-2018-8788
FreeRDP prior to version 2.0.0-rc4 contains an Out-Of-Bounds Write of up to 4 bytes in function nscrledecode that results in a memory corruption and possibly even a remote code execution...
CVE-2018-8784
FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfxdecompresssegment that results in a memory corruption and probably even a remote code execution...
CVE-2018-8786
CVE-2018-8786 affects FreeRDP prior to 2.0.0-rc4, caused by an Integer Truncation in update_read_bitmap_update() that leads to a heap-based buffer overflow and memory corruption with potential remote code execution. Connected advisories (CentOS/CESA-2019:0697, Fedora package updates, Amazon Linux...
CVE-2018-8784
CVE-2018-8784 affects FreeRDP prior to 2.0.0-rc4, with a heap-based buffer overflow in zgfx_decompress_segment() causing memory corruption and likely remote code execution. Public documents show this flaw alongside related issues and confirm mitigation by upgrading to freerdp 2.0.0-rc4 or later (...
CVE-2018-8784
FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfxdecompresssegment that results in a memory corruption and probably even a remote code execution...
CVE-2018-8788
FreeRDP prior to version 2.0.0-rc4 contains an Out-Of-Bounds Write of up to 4 bytes in function nscrledecode that results in a memory corruption and possibly even a remote code execution...
CVE-2018-8785
FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfxdecompress that results in a memory corruption and probably even a remote code execution...
CVE-2018-8787
FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdiBitmapDecompress and results in a memory corruption and probably even a remote code execution...
CVE-2018-8789
FreeRDP prior to version 2.0.0-rc4 contains several Out-Of-Bounds Reads in the NTLM Authentication module that results in a Denial of Service segfault...
