Microsoft Windows Remote Desktop Services Remote Code Execution Vulnerability

Microsoft Windows 7 is an operating system released by Microsoft.Windows Server 2008 is a server operating system released by Microsoft.Microsoft Windows XP is a popular Windows operating system.Microsoft Windows Server 2003 R2 is a set of server operating systems released by Microsoft Corporatio...

Prevent a worm by updating Remote Desktop Services (CVE-2019-0708)

Today Microsoft released fixes for a critical Remote Code Execution vulnerability, CVE-2019-0708, in Remote Desktop Services – formerly known as Terminal Services – that affects some older versions of Windows. The Remote Desktop Protocol RDP itself is not vulnerable. This vulnerability is...

Microsoft Security Advisory 4500331: Guidance for older platforms (XP / 2003) (BlueKeep)

The remote Windows host is missing a security update. It is, therefore, affected by a unspecified flaw that exists in the Remote Desktop Protocol RDP service. An unauthenticated, remote attacker can exploit this, via a specially crafted application, to execute arbitrary code with full user...

Top 5 Configuration Mistakes That Create Field Days for Hackers

Sometimes it’s the little things that lead to big consequences. When it comes to cybersecurity, hacks more often than not stem from minor missteps – or even completely preventable, obvious mistakes. Common security mistakes and overlooked misconfigurations can open the door for attackers to drop...

Fedora Update for rdesktop FEDORA-2019-ac70292cfc

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

The vulnerability of the process_demand_active function in the RDP client rdesktop, related to reading beyond the buffer limit, allows a hacker to cause service failure.

The vulnerability of the processdemandactive function in the RDP client rdesktop is related to reading data beyond the buffer boundary. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the seamless_process_line function in the RDP client rdesktop, related to buffer overflow, allows an attacker to execute arbitrary code.

The vulnerability of the seamlessprocessline function in the RDP client rdesktop is related to buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CentOS 7 : freerdp (CESA-2019:0697)

An update for freerdp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

freerdp security update

CentOS Errata and Security Advisory CESA-2019:0697 An update for freerdp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

April 9, 2019—KB4493467 (Security-only update)

None None...

[SECURITY] Fedora 28 Update: freerdp-2.0.0-49.20190304git435872b.fc28

The xfreerdp & wlfreerdp Remote Desktop Protocol RDP clients from the Fre eRDP project. xfreerdp & wlfreerdp can connect to RDP servers such as Microsoft Windows machines, xrdp and VirtualBox...

Fedora Update for freerdp FEDORA-2019-b2d986c3e9

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Oracle Linux 7 : freerdp (ELSA-2019-0697)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-0697 advisory. - Fix CVE-2018-8786 1684152 - Fix CVE-2018-8787 1684156 Tenable has extracted the preceding description block directly from the Oracle Linux security...

March 12, 2019—KB4489878 (Monthly Rollup)

None None...

March 12, 2019—KB4489891 (Monthly Rollup)

None None...

rdesktop: Multiple vulnerabilities

Background rdesktop is a Remote Desktop Protocol RDP Client. Description Multiple vulnerabilities have been discovered in rdesktop. Please review the CVE identifiers referenced below for details. Impact A remote attacker could cause a Denial of Service condition, obtain sensitive information, or...

[SECURITY] Fedora 29 Update: freerdp-2.0.0-48.20190228gitce386c8.fc29

The xfreerdp & wlfreerdp Remote Desktop Protocol RDP clients from the Fre eRDP project. xfreerdp & wlfreerdp can connect to RDP servers such as Microsoft Windows machines, xrdp and VirtualBox...

The vulnerability in the implementation of the “cssp_read_tsrequest” function in the RDP client rdesktop software arises from buffer overflow in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the “csspreadtsrequest” function in the RDP client rdesktop implementation is related to buffer overflow in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability of the “process_bitmap_updates” function implementation in the RDP client rdesktop software arises from integer overflow, which leads to writing beyond the boundaries of the function. This allows attackers to execute arbitrary code.

The vulnerability of the “processbitmapupdates” function in the RDP client rdesktop implementation is related to integer overflow, which leads to writing beyond the bounds of the function’s capacity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

[SECURITY] Fedora 29 Update: rdesktop-1.8.4-2.fc29

rdesktop is an open source client for Windows NT Terminal Server and Windows 2000 & 2003 Terminal Services, capable of natively speaking Remote Desktop Protocol RDP in order to present the user's NT desktop. Unlike Citrix ICA, no server extensions are required...