Denial Of Service (DoS)

freerdp is vulnerable to denial of service DoS. The attacker use through an out-of-bounds read in the cliprdrreadformatlist function leads to the application crash...

Denial Of Service (DoS)

freerdp is vulnerable to denial of service DoS. The vulnerability exists through an out-of-bound read of client memory that is then passed on to the protocol parser...

Denial Of Service (DoS)

freerdp is vulnerable to denial of service DoS. The vulnerability exists through an out-of-bounds read...

Privilege Escalation

freerdp is vulnerable to privilege escalation. The vulnerability exists through an out-of-bounds read in the autodetectrecvbandwidthmeasureresults function...

Denial Of Service (DoS)

freerdp is vulnerable to denial of service DoS. The vulnerability exists through an out of bounds seek in the updatereadsynchronize function...

Privilege Escalation

freerdp is vulnerable to privilege escalation. The vulnerability exists through an out of bounds read in the updatereadbitmapdata function...

Denial Of Service (DoS)

freerdp is vulnerable to denial of service DoS. The vulnerability exists through an out of bound read in rfxprocessmessagetileset...

Denial Of Service (DoS)

freerdp is vulnerable to denial of service DoS. The attacker use through a double free in the updatereadcachebitmapv3order function leads to the application crash...

Denial Of Service (DoS)

freerdp is vulnerable to denial of service DoS. The vulnerability exists through an unchecked read of array offset in rdpsndrecvwave2pdu...

Denial Of Service (DoS)

freerdp is vulnerable to denial of service DoS. The attacker use through an out of bound read from memory access in cleardecompresssubcoderlex function leads to the application crash...

Arbitrary Code Execution

freerdp is vulnerable to arbitrary code execution. The vulnerability exists through an out of bound read/write in usb redirection channel...

Denial Of Service (DoS)

freerdp is vulnerable to denial of service DoS. The vulnerability exists through an out of bound read in updaterecv...

Authorization Bypass

freerdp is vulnerable to authorization bypass. The vulnerability exists through an integer overflow issue in VIDEO channel...

Denial Of Service (DoS)

freerdp is vulnerable to denial of service DoS. The vulnerability exists through an out of bound read in cliprdrserverreceivecapabilities...

freerdp: Out-of-bounds read in ntlm_read_ChallengeMessage in winpr/libwinpr/sspi/NTLM/ntlm_message.c.

An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds OOB read vulnerability has been detected in ntlmreadChallengeMessage in winpr/libwinpr/sspi/NTLM/ntlmmessage.c...

freerdp: out-of-bounds read in bitmap.c

libfreerdp/cache/bitmap.c in FreeRDP versions 1.0 through 2.0.0-rc4 has an Out of bounds read...

freerdp: Unchecked read of array offset in rdpsnd_recv_wave2_pdu

In FreeRDP less than or equal to 2.0.0, an outside controlled array index is used unchecked for data used as configuration for sound backend alsa, oss, pulse, .... The most likely outcome is a crash of the client instance followed by no or distorted sound or a session disconnect. If a user cannot...

freerdp: out-of-bounds read in ntlm_read_NegotiateMessage

In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlmreadNegotiateMessage. This has been fixed in 2.1.0...

freerdp: Out of bound access in clear_decompress_subcode_rlex

In FreeRDP less than or equal to 2.0.0, there is an out-of-bound data read from memory in cleardecompresssubcoderlex, visualized on screen as color. This has been patched in 2.1.0...

freerdp: Out of bound read/write in usb redirection channel

In FreeRDP less than or equal to 2.0.0, when using a manipulated server with USB redirection enabled nearly arbitrary memory can be read and written due to integer overflows in length checks. This has been patched in 2.1.0...