2603 matches found
Flaws in Popular RDP Clients Allow Malicious Servers to Reverse Hack PCs
You've always been warned not to share remote access to your computer with any untrusted people for many reasons—it's basic cyber security advice, and common sense, right? But what if I say, you should not even trust anyone who invites or offers you full remote access to their computers? Security...
Remote Desktop Protocol Clients Rife with Remote Code-Execution Flaws
UPDATE LAS VEGAS — Multiple critical vulnerabilities in the commonly used Remote Desktop Protocol RDP would allow a malicious actor to achieve remote code-execution over a client’s computer. According to Check Point research released Tuesday at the CPX360 event in Las Vegas, both open-source and...
Fixing Virtualbox RDP Server with DetectionLab
Yesterday I posted about DetectionLab, but noted that I was having trouble with the RDP servers offered by Virtualbox. If you remember, DetectionLab builds four virtual machines: root@LAPTOP-HT4TGVCP C:\Users\root"c:\Program Files\Oracle\VirtualBox\VBoxManage" list runningvms "logger"...
Police Shut Down xDedic – An Online Market for Cyber Criminals
In an international operation involving law enforcement authorities from the U.S. and several European countries, feds have shut down an online underground marketplace and arrested three suspects in Ukraine. Dubbed xDedic, the illegal online marketplace let cybercriminals buy, sell or rent out...
PT-2019-1461
Name of the Vulnerable Software and Affected Versions rdesktop versions up to and including v1.8.3 Description The issue is related to an Integer Overflow in the process bitmap updates function, leading to an Out-Of-Bounds Write and resulting in memory corruption. This could potentially allow for...
PT-2019-1460
Name of the Vulnerable Software and Affected Versions rdesktop versions up to and including v1.8.3 Description The issue is related to a heap-based buffer overflow in the cssp read tsrequest function of the RDP client. This can lead to memory corruption and potentially allow a remote attacker to...
PT-2019-1466
Name of the Vulnerable Software and Affected Versions rdesktop versions up to and including v1.8.3 Description The issue is related to an Out-Of-Bounds Read in the process secondary order function, which can result in a Denial of Service segfault. This can be exploited by a remote attacker to cau...
PT-2019-1915
Name of the Vulnerable Software and Affected Versions rdesktop versions up to and including v1.8.3 Description The issue is related to an Out-Of-Bounds Read in the process demand active function, which results in a Denial of Service segfault. This can be exploited by a remote attacker to cause a...
PT-2019-1914
Name of the Vulnerable Software and Affected Versions rdesktop versions up to and including v1.8.3 Description The issue is related to an Integer Overflow in the rdp in unistr function, which leads to a Heap-Based Buffer Overflow, resulting in memory corruption and possibly even remote code...
PVS target devices are randomly getting unregistered and going down in PVS console
Target devices show up and running in hypervisor console Targets show down in PVS console and get unregistered intermittently Restart fixes the issue During the time of issue, ping to the target device works,but RDP fails...
CVE-2018-1000852
FreeRDP FreeRDP 2.0.0-rc3 released version before commit 205c612820dac644d665b5bb1cdf437dc5ca01e3 contains a Other/Unknown vulnerability in channels/drdynvc/client/drdynvcmain.c, drdynvcprocesscapabilityrequest that can result in The RDP server can read the client's memory.. This attack appear to...
CVE-2018-1000852
FreeRDP FreeRDP 2.0.0-rc3 released version before commit 205c612820dac644d665b5bb1cdf437dc5ca01e3 contains a Other/Unknown vulnerability in channels/drdynvc/client/drdynvcmain.c, drdynvcprocesscapabilityrequest that can result in The RDP server can read the client's memory.. This attack appear to...
Design/Logic Flaw
FreeRDP FreeRDP 2.0.0-rc3 released version before commit 205c612820dac644d665b5bb1cdf437dc5ca01e3 contains a Other/Unknown vulnerability in channels/drdynvc/client/drdynvcmain.c, drdynvcprocesscapabilityrequest that can result in The RDP server can read the client's memory.. This attack appear to...
CVE-2018-1000852
FreeRDP FreeRDP 2.0.0-rc3 released version before commit 205c612820dac644d665b5bb1cdf437dc5ca01e3 contains a Other/Unknown vulnerability in channels/drdynvc/client/drdynvcmain.c, drdynvcprocesscapabilityrequest that can result in The RDP server can read the client's memory.. This attack appear to...
CVE-2018-1000852
CVE-2018-1000852 affects FreeRDP 2.0.0-rc3 prior to commit 205c612820dac644d665b5bb1cdf437dc5ca01e3, where an issue in drdynvc_main.c (drdynvc_process_capability_request) allows the RDP server to read client memory. This is triggered when an RDP client connects with the echo option; exploitation ...
CVE-2018-1000852
FreeRDP FreeRDP 2.0.0-rc3 released version before commit 205c612820dac644d665b5bb1cdf437dc5ca01e3 contains a Other/Unknown vulnerability in channels/drdynvc/client/drdynvcmain.c, drdynvcprocesscapabilityrequest that can result in The RDP server can read the client's memory.. This attack appear to...
SamSam Ransomware
Summary The Department of Homeland Security DHS National Cybersecurity and Communications Integration Center NCCIC and the Federal Bureau of Investigation FBI are issuing this activity alert to inform computer network defenders about SamSam ransomware, also known as MSIL/Samas.A. Specifically, th...
DEBIAN-CVE-2018-8789
FreeRDP prior to version 2.0.0-rc4 contains several Out-Of-Bounds Reads in the NTLM Authentication module that results in a Denial of Service segfault...
CVE-2018-8784
FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfxdecompresssegment that results in a memory corruption and probably even a remote code execution...