Design/Logic Flaw

In done of CaptivePortalLoginActivity.java, there is a confused deputy. This could lead to local escalation of privilege in carrier settings with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-160871056...

FreeRDP Code Execution Vulnerability

FreeRDP is a is a FreeRDP team developed a Windows, OSX and Linux platform based on the free, open source implementation of the Remote Desktop Protocol RDP. A remote code execution vulnerability exists in FreeRDP version 2.0.0-beta1+android11 for Windows, OSX and Linux platforms. A remote attacke...

CVE-2017-2835

An exploitable code execution vulnerability exists in the RDP receive functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write resulting in an exploitable condition. An attacker can compromise the server or use a man in the middle to...

Design/Logic Flaw

An exploitable code execution vulnerability exists in the authentication functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write resulting in an exploitable condition. An attacker can compromise the server or use a man in the middle...

CVE-2017-2836

CVE-2017-2836 : FreeRDP contains an exploitable denial-of-service in the handling of proprietary server certificates. A specially crafted challenge packet can cause the program to terminate, resulting in a DoS condition. Affected component: FreeRDP 2.0.0-beta1+android11 (reading of server certifi...

CVE-2017-2834

An exploitable code execution vulnerability exists in the authentication functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write resulting in an exploitable condition. An attacker can compromise the server or use a man in the middle...

CVE-2017-2839

CVE-2017-2839 affects FreeRDP 2.0.0-beta1+android11. A vulnerability in the handling of challenge packets can cause the program to terminate, leading to a denial of service. An attacker could exploit this over the network, potentially compromising the server or performing a man-in-the-middle atta...

CVE-2017-2839

An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the...