Mandriva Linux Security Advisory : freerdp (MDVSA-2015:171)

Updated freerdp packages fix security vulnerabilities : Integer overflows in memory allocations in client/X11/xfgraphics.c in FreeRDP through 1.0.2 allows remote RDP servers to have an unspecified impact through unspecified vectors CVE-2014-0250. Integer overflow in the licensereadscopelist...

GLSA-201412-18 : FreeRDP: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201412-18 FreeRDP: User-assisted execution of arbitrary code FreeRDP does not properly validate user-supplied input, which could lead to an integer overflow in the xfPointerNew function. Impact : A remote attacker could execute...

FreeRDP: User-assisted execution of arbitrary code

Background FreeRDP is a free implementation of the remote desktop protocol. Description FreeRDP does not properly validate user-supplied input, which could lead to an integer overflow in the xfPointerNew function. Impact A remote attacker could execute arbitrary code with the privileges of the...

CVE-2014-0250

Multiple integer overflows in client/X11/xfgraphics.c in FreeRDP allow remote attackers to have an unspecified impact via the width and height to the 1 xfPointerNew or 2 xfBitmapDecompress function, which causes an incorrect amount of memory to be allocated...

Integer overflow

Multiple integer overflows in client/X11/xfgraphics.c in FreeRDP allow remote attackers to have an unspecified impact via the width and height to the 1 xfPointerNew or 2 xfBitmapDecompress function, which causes an incorrect amount of memory to be allocated...

CVE-2014-0250

Multiple integer overflows in client/X11/xfgraphics.c in FreeRDP allow remote attackers to have an unspecified impact via the width and height to the 1 xfPointerNew or 2 xfBitmapDecompress function, which causes an incorrect amount of memory to be allocated...

CVE-2014-0250

Multiple integer overflows in client/X11/xfgraphics.c in FreeRDP allow remote attackers to have an unspecified impact via the width and height to the 1 xfPointerNew or 2 xfBitmapDecompress function, which causes an incorrect amount of memory to be allocated...

CVE-2014-0250

The CVE-2014-0250 issue affects FreeRDP, specifically in the X11 client code path (xf_graphics.c). The vulnerability stems from multiple integer overflows in the width and height handling used by xf_Pointer_New and xf_Bitmap_Decompress, which can cause incorrect memory allocation. This is describ...

CVE-2014-0250

Removed by vendor...

CVE-2014-0250

Multiple integer overflows in client/X11/xfgraphics.c in FreeRDP allow remote attackers to have an unspecified impact via the width and height to the 1 xfPointerNew or 2 xfBitmapDecompress function, which causes an incorrect amount of memory to be allocated...

CVE-2014-0250: Undefined Security Weakness

Multiple integer overflows in client/X11/xfgraphics.c in FreeRDP allow remote attackers to have an unspecified impact via the width and height to the 1 xfPointerNew or 2 xfBitmapDecompress function, which causes an incorrect amount of memory to be allocated...

MGASA-2014-0287 Updated freerdp packages fix two vulnerabilities

Updated freerdp packages fix security vulnerabilities: Integer overflows in memory allocations in client/X11/xfgraphics.c in FreeRDP through 1.0.2 allows remote RDP servers to have an unspecified impact through unspecified vectors CVE-2014-0250. Integer overflow in the licensereadscopelist functi...

Updated freerdp packages fix two vulnerabilities

Updated freerdp packages fix security vulnerabilities: Integer overflows in memory allocations in client/X11/xfgraphics.c in FreeRDP through 1.0.2 allows remote RDP servers to have an unspecified impact through unspecified vectors CVE-2014-0250. Integer overflow in the licensereadscopelist functi...

PT-2014-3556

Name of the Vulnerable Software and Affected Versions FreeRDP affected versions not specified Description The issue is related to multiple integer overflows in the client/X11/xf graphics.c file of FreeRDP. This occurs when the width and height are passed to either the xf Pointer New or xf Bitmap...

openSUSE Security Update : freerdp (openSUSE-SU-2014:0862-1)

freerdp was patched to fix several integer overflows. These security issues were fixed : - Integer overflow CVE-2014-0791 - Integer overflows in memory allocations in client/X11/xfgraphics.c CVE-2014-0250 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...

FreeRDP license_read_scope_list函数整数溢出漏洞

CVE ID:CVE-2014-0791 FreeRDP是一款远程桌面协议的实现。 FreeRDP licensereadscopelist函数libfreerdp/core/license.c存在整数溢出错误，允许远程攻击者提交特制的服务器许可证请求报文Scope列表中包含超大ScopeCount值，使远程RDP服务器崩溃，造成拒绝服务攻击。 0 FreeRDP 1.0.2 厂商补丁： FreeRDP ----- 用户可参考如下厂商提供的安全公告获得补丁信息：...

CVE-2014-0791

Integer overflow in the licensereadscopelist function in libfreerdp/core/license.c in FreeRDP through 1.0.2 allows remote RDP servers to cause a denial of service application crash or possibly have unspecified other impact via a large ScopeCount value in a Scope List in a Server License Request...

CVE-2014-0791

CVE-2014-0791 describes an integer overflow in FreeRDP’s libfreerdp/core/license.c (license_read_scope_list) that can be triggered by a large ScopeCount in a Server License Request, potentially causing remote denial of service. Affected: FreeRDP up to 1.0.2. Remediation from connected sources inc...

CVE-2014-0791

Integer overflow in the licensereadscopelist function in libfreerdp/core/license.c in FreeRDP through 1.0.2 allows remote RDP servers to cause a denial of service application crash or possibly have unspecified other impact via a large ScopeCount value in a Scope List in a Server License Request...

PT-2014-3844

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 1.0.2 ALT Linux affected versions not specified Description The issue is related to an integer overflow in the license read scope list function, which can be triggered by a large ScopeCount value in a Scope List in a...