PT-2016-3475

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 1.1.0-beta+2013071101 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, by disconnecting before authentication has finished...

PT-2016-3474

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 1.1.0-beta1 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via unspecified vectors. Recommendations For versions prior to...

PT-2019-5420

Name of the Vulnerable Software and Affected Versions FreeRDP versions 1.1.x through 2.0.0-rc4 Description The issue is related to memory leaks in the FreeRDP implementation due to improper handling of a supplied realloc pointer. This can lead to a denial of service. The estimated number of...

Mandriva Linux Security Advisory : freerdp (MDVSA-2015:171)

Updated freerdp packages fix security vulnerabilities : Integer overflows in memory allocations in client/X11/xfgraphics.c in FreeRDP through 1.0.2 allows remote RDP servers to have an unspecified impact through unspecified vectors CVE-2014-0250. Integer overflow in the licensereadscopelist...

GLSA-201412-18 : FreeRDP: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201412-18 FreeRDP: User-assisted execution of arbitrary code FreeRDP does not properly validate user-supplied input, which could lead to an integer overflow in the xfPointerNew function. Impact : A remote attacker could execute...

FreeRDP: User-assisted execution of arbitrary code

Background FreeRDP is a free implementation of the remote desktop protocol. Description FreeRDP does not properly validate user-supplied input, which could lead to an integer overflow in the xfPointerNew function. Impact A remote attacker could execute arbitrary code with the privileges of the...

CVE-2014-0250

Multiple integer overflows in client/X11/xfgraphics.c in FreeRDP allow remote attackers to have an unspecified impact via the width and height to the 1 xfPointerNew or 2 xfBitmapDecompress function, which causes an incorrect amount of memory to be allocated...

Integer overflow

Multiple integer overflows in client/X11/xfgraphics.c in FreeRDP allow remote attackers to have an unspecified impact via the width and height to the 1 xfPointerNew or 2 xfBitmapDecompress function, which causes an incorrect amount of memory to be allocated...

CVE-2014-0250

Multiple integer overflows in client/X11/xfgraphics.c in FreeRDP allow remote attackers to have an unspecified impact via the width and height to the 1 xfPointerNew or 2 xfBitmapDecompress function, which causes an incorrect amount of memory to be allocated...

CVE-2014-0250

Multiple integer overflows in client/X11/xfgraphics.c in FreeRDP allow remote attackers to have an unspecified impact via the width and height to the 1 xfPointerNew or 2 xfBitmapDecompress function, which causes an incorrect amount of memory to be allocated...

CVE-2014-0250

The CVE-2014-0250 issue affects FreeRDP, specifically in the X11 client code path (xf_graphics.c). The vulnerability stems from multiple integer overflows in the width and height handling used by xf_Pointer_New and xf_Bitmap_Decompress, which can cause incorrect memory allocation. This is describ...

CVE-2014-0250

Removed by vendor...

CVE-2014-0250

Multiple integer overflows in client/X11/xfgraphics.c in FreeRDP allow remote attackers to have an unspecified impact via the width and height to the 1 xfPointerNew or 2 xfBitmapDecompress function, which causes an incorrect amount of memory to be allocated...

CVE-2014-0250: Undefined Security Weakness

Multiple integer overflows in client/X11/xfgraphics.c in FreeRDP allow remote attackers to have an unspecified impact via the width and height to the 1 xfPointerNew or 2 xfBitmapDecompress function, which causes an incorrect amount of memory to be allocated...

Updated freerdp packages fix two vulnerabilities

Updated freerdp packages fix security vulnerabilities: Integer overflows in memory allocations in client/X11/xfgraphics.c in FreeRDP through 1.0.2 allows remote RDP servers to have an unspecified impact through unspecified vectors CVE-2014-0250. Integer overflow in the licensereadscopelist functi...

MGASA-2014-0287 Updated freerdp packages fix two vulnerabilities

Updated freerdp packages fix security vulnerabilities: Integer overflows in memory allocations in client/X11/xfgraphics.c in FreeRDP through 1.0.2 allows remote RDP servers to have an unspecified impact through unspecified vectors CVE-2014-0250. Integer overflow in the licensereadscopelist functi...

PT-2014-3556

Name of the Vulnerable Software and Affected Versions FreeRDP affected versions not specified Description The issue is related to multiple integer overflows in the client/X11/xf graphics.c file of FreeRDP. This occurs when the width and height are passed to either the xf Pointer New or xf Bitmap...

openSUSE Security Update : freerdp (openSUSE-SU-2014:0862-1)

freerdp was patched to fix several integer overflows. These security issues were fixed : - Integer overflow CVE-2014-0791 - Integer overflows in memory allocations in client/X11/xfgraphics.c CVE-2014-0250 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...

FreeRDP license_read_scope_list函数整数溢出漏洞

CVE ID:CVE-2014-0791 FreeRDP是一款远程桌面协议的实现。 FreeRDP licensereadscopelist函数libfreerdp/core/license.c存在整数溢出错误，允许远程攻击者提交特制的服务器许可证请求报文Scope列表中包含超大ScopeCount值，使远程RDP服务器崩溃，造成拒绝服务攻击。 0 FreeRDP 1.0.2 厂商补丁： FreeRDP ----- 用户可参考如下厂商提供的安全公告获得补丁信息：...

CVE-2014-0791

Integer overflow in the licensereadscopelist function in libfreerdp/core/license.c in FreeRDP through 1.0.2 allows remote RDP servers to cause a denial of service application crash or possibly have unspecified other impact via a large ScopeCount value in a Scope List in a Server License Request...