589 matches found
ALPINE-CVE-2018-8799
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function processsecondaryorder that results in a Denial of Service segfault...
Flaws in Popular RDP Clients Allow Malicious Servers to Reverse Hack PCs
You've always been warned not to share remote access to your computer with any untrusted people for many reasons—it's basic cyber security advice, and common sense, right? But what if I say, you should not even trust anyone who invites or offers you full remote access to their computers? Security...
CVE-2018-8798
CVE-2018-8798 affects the rdesktop RDP client up to version 1.8.3, where rdpsnd_process_ping() contains an out-of-bounds read that leads to information leakage. Public sources in the connected documents confirm the vulnerability class as an information disclosure issue in rdesktop prior to 1.8.4....
CVE-2018-8792
CVE-2018-8792 affects rdesktop up to version 1.8.3. The flaw is an out-of-bounds read in cssp_read_tsrequest(), leading to a Denial of Service (segfault). Public advisories indicate upgrading to 1.8.4 or later as the fix. Exploitation details are not described in the provided documents; no in-the...
CVE-2018-8792
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function csspreadtsrequest that results in a Denial of Service segfault...
CVE-2018-8797
rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function processplane that results in a memory corruption and probably even a remote code execution...
CVE-2018-8800
CVE-2018-8800 affects rdesktop prior to 1.8.4. It is a heap-based buffer overflow in ui_clip_handle_data() causing memory corruption and likely remote code execution when connecting to a malicious server. Multiple advisories (Arch Linux ASA-201902-5, Debian DSA-4394-1/ DLA-1683-1) indicate upgrad...
CVE-2018-8794
CVE-2018-8794 affects rdesktop up to version 1.8.3. The vulnerability is an integer overflow causing an out-of-bounds write in process_bitmap_updates(), leading to memory corruption and potential remote code execution when connecting to a malicious server. Multiple connected advisories confirm re...
CVE-2018-8793
CVE-2018-8793 affects rdesktop up to version 1.8.3, where a heap-based buffer overflow in cssp_read_tsrequest() causes memory corruption and likely remote code execution. Multiple connected advisories confirm upstream fix to 1.8.4; remediation is to upgrade to 1.8.4 or newer. Exploitation status ...
CVE-2018-8793
rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function csspreadtsrequest that results in a memory corruption and probably even a remote code execution...
CVE-2018-8795
rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in function processbitmapupdates and results in a memory corruption and probably even a remote code execution...
CVE-2018-8791
CVE-2018-8791 affects the rdesktop RDP client (versions up to and including 1.8.3). The vulnerability is an out-of-bounds read in the function rdpdr_process(), leading to information leakage when connecting to a malicious server. Several advisory sources confirm the issue and note that upstream f...
CVE-2018-8796
CVE-2018-8796 affects rdesktop up to v1.8.3, with an out-of-bounds read in process_bitmap_updates() causing a denial of service (segfault). Remediation: upgrade to v1.8.4 or later (multiple advisories note the fix in upstream 1.8.4; Fedora/Debian/Arch Linux references).
CVE-2018-8800
rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function uicliphandledata that results in a memory corruption and probably even a remote code execution...
CVE-2018-8791
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpdrprocess that results in an information leak...
CVE-2018-8796
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function processbitmapupdates that results in a Denial of Service segfault...
CVE-2018-8799
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function processsecondaryorder that results in a Denial of Service segfault...
CVE-2018-8792
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function csspreadtsrequest that results in a Denial of Service segfault...