CVE-2018-8789

CVE-2018-8789 affects FreeRDP prior to 2.0.0-rc4, where multiple out-of-bounds reads in the NTLM authentication module can cause a Denial of Service (segfault). The vulnerability is documented across multiple advisories and Nessus plugins as part of a family of FreeRDP issues fixed in the 2.0.0-r...

CVE-2018-8789

FreeRDP prior to version 2.0.0-rc4 contains several Out-Of-Bounds Reads in the NTLM Authentication module that results in a Denial of Service segfault...

CVE-2018-8789

FreeRDP prior to version 2.0.0-rc4 contains several Out-Of-Bounds Reads in the NTLM Authentication module that results in a Denial of Service segfault...

CVE-2018-8789

FreeRDP prior to version 2.0.0-rc4 contains several Out-Of-Bounds Reads in the NTLM Authentication module that results in a Denial of Service segfault...

CVE-2018-8787

CVE-2018-8787 affects FreeRDP prior to 2.0.0-rc4. It describes an Integer Overflow in gdi_Bitmap_Decompress() that leads to a heap-based memory corruption with potential remote code execution. Remediation is to upgrade to FreeRDP 2.0.0-rc4 or newer (as referenced by linked advisories). The vulner...

CVE-2018-8784

FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfxdecompresssegment that results in a memory corruption and probably even a remote code execution...

CVE-2018-8785

FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfxdecompress that results in a memory corruption and probably even a remote code execution...

CVE-2018-8784

FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfxdecompresssegment that results in a memory corruption and probably even a remote code execution...

CVE-2018-8787

FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdiBitmapDecompress and results in a memory corruption and probably even a remote code execution...

CVE-2018-8787

FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdiBitmapDecompress and results in a memory corruption and probably even a remote code execution...

CVE-2018-8785

FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfxdecompress that results in a memory corruption and probably even a remote code execution...

CVE-2018-8788

FreeRDP prior to version 2.0.0-rc4 contains an Out-Of-Bounds Write of up to 4 bytes in function nscrledecode that results in a memory corruption and possibly even a remote code execution...

CVE-2018-8785

CVE-2018-8785 is a vulnerability in FreeRDP prior to 2.0.0-rc4, caused by a heap-based buffer overflow in the zgfx_decompress() function leading to memory corruption and probable remote code execution. Publicly documented in multiple advisories (including openSUSE/SUSE updates and Ubuntu/OpenVAS ...

CVE-2018-8784

CVE-2018-8784 affects FreeRDP prior to 2.0.0-rc4, with a heap-based buffer overflow in zgfx_decompress_segment() causing memory corruption and likely remote code execution. Public documents show this flaw alongside related issues and confirm mitigation by upgrading to freerdp 2.0.0-rc4 or later (...

CVE-2018-8788

FreeRDP prior to version 2.0.0-rc4 contains an Out-Of-Bounds Write of up to 4 bytes in function nscrledecode that results in a memory corruption and possibly even a remote code execution...

CVE-2018-8788

FreeRDP prior to version 2.0.0-rc4 contains an Out-Of-Bounds Write of up to 4 bytes in function nscrledecode that results in a memory corruption and possibly even a remote code execution...

CVE-2018-8787

FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdiBitmapDecompress and results in a memory corruption and probably even a remote code execution...

CVE-2018-8786

FreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based Buffer Overflow in function updatereadbitmapupdate and results in a memory corruption and probably even a remote code execution...

CVE-2018-8788

CVE-2018-8788 affects FreeRDP prior to 2.0.0-rc4, with an out-of-bounds write of up to 4 bytes in nsc_rle_decode() that can cause memory corruption and potentially remote code execution. Several advisories confirm the issue and list updates/patches (e.g., freerdp updates in CentOS/Red Hat/Mageia/...

CVE-2018-8787

FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdiBitmapDecompress and results in a memory corruption and probably even a remote code execution...