openSUSE Security Update : freerdp (openSUSE-2016-1132)

This update for freerdp fixes the following issues : Security issues fixed : - CVE-2013-4118: Add a NULL pointer check to fix a server crash boo829013. - CVE-2014-0791: The remaining length in the stream is checked before doing some malloc, which could have lead to crashes. boo857491. %NASLMINLEV...

PT-2020-12509 · Freerdp +7 · Freerdp +7

Name of the Vulnerable Software and Affected Versions: FreeRDP versions 1.0 through 1.9 Description: The issue is an out-of-bounds read that can only be used to abort a session, with no possibility of data extraction. Recommendations: For FreeRDP versions 1.0 through 1.9, update to version 2.0.0 ...

PT-2020-12508 · Freerdp +7 · Freerdp +7

Name of the Vulnerable Software and Affected Versions: FreeRDP versions 1.0 through 2.0.0 Description: The issue is related to a stream out-of-bounds seek in the update read synchronize function, which could lead to a later out-of-bounds read. Recommendations: For FreeRDP versions 1.0 through...

Gentoo Security Advisory GLSA 201412-18

Gentoo Linux Local Security Checks GLSA 201412-18 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

[ MDVSA-2015:171 ] freerdp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:171 http://www.mandriva.com/en/support/security/ Package : freerdp Date : March 30, 2015 Affected: Business Server 2.0 Problem Description: Updated freerdp packages fix security vulnerabilities: Integer...

FreeRDP integer overflow

Integer overflow on server response parsing...

Mandriva Linux Security Advisory : freerdp (MDVSA-2015:171)

Updated freerdp packages fix security vulnerabilities : Integer overflows in memory allocations in client/X11/xfgraphics.c in FreeRDP through 1.0.2 allows remote RDP servers to have an unspecified impact through unspecified vectors CVE-2014-0250. Integer overflow in the licensereadscopelist...

GLSA-201412-18 : FreeRDP: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201412-18 FreeRDP: User-assisted execution of arbitrary code FreeRDP does not properly validate user-supplied input, which could lead to an integer overflow in the xfPointerNew function. Impact : A remote attacker could execute...

FreeRDP: User-assisted execution of arbitrary code

Background FreeRDP is a free implementation of the remote desktop protocol. Description FreeRDP does not properly validate user-supplied input, which could lead to an integer overflow in the xfPointerNew function. Impact A remote attacker could execute arbitrary code with the privileges of the...

CVE-2014-0250

Multiple integer overflows in client/X11/xfgraphics.c in FreeRDP allow remote attackers to have an unspecified impact via the width and height to the 1 xfPointerNew or 2 xfBitmapDecompress function, which causes an incorrect amount of memory to be allocated...

Integer overflow

Multiple integer overflows in client/X11/xfgraphics.c in FreeRDP allow remote attackers to have an unspecified impact via the width and height to the 1 xfPointerNew or 2 xfBitmapDecompress function, which causes an incorrect amount of memory to be allocated...

CVE-2014-0250

Multiple integer overflows in client/X11/xfgraphics.c in FreeRDP allow remote attackers to have an unspecified impact via the width and height to the 1 xfPointerNew or 2 xfBitmapDecompress function, which causes an incorrect amount of memory to be allocated...

CVE-2014-0250

Removed by vendor...

CVE-2014-0250

The CVE-2014-0250 issue affects FreeRDP, specifically in the X11 client code path (xf_graphics.c). The vulnerability stems from multiple integer overflows in the width and height handling used by xf_Pointer_New and xf_Bitmap_Decompress, which can cause incorrect memory allocation. This is describ...

CVE-2014-0250

Multiple integer overflows in client/X11/xfgraphics.c in FreeRDP allow remote attackers to have an unspecified impact via the width and height to the 1 xfPointerNew or 2 xfBitmapDecompress function, which causes an incorrect amount of memory to be allocated...

MGASA-2014-0287 Updated freerdp packages fix two vulnerabilities

Updated freerdp packages fix security vulnerabilities: Integer overflows in memory allocations in client/X11/xfgraphics.c in FreeRDP through 1.0.2 allows remote RDP servers to have an unspecified impact through unspecified vectors CVE-2014-0250. Integer overflow in the licensereadscopelist functi...

Updated freerdp packages fix two vulnerabilities

Updated freerdp packages fix security vulnerabilities: Integer overflows in memory allocations in client/X11/xfgraphics.c in FreeRDP through 1.0.2 allows remote RDP servers to have an unspecified impact through unspecified vectors CVE-2014-0250. Integer overflow in the licensereadscopelist functi...

openSUSE Security Update : freerdp (openSUSE-SU-2014:0862-1)

freerdp was patched to fix several integer overflows. These security issues were fixed : - Integer overflow CVE-2014-0791 - Integer overflows in memory allocations in client/X11/xfgraphics.c CVE-2014-0250 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...

FreeRDP license_read_scope_list函数整数溢出漏洞

CVE ID:CVE-2014-0791 FreeRDP是一款远程桌面协议的实现。 FreeRDP licensereadscopelist函数libfreerdp/core/license.c存在整数溢出错误，允许远程攻击者提交特制的服务器许可证请求报文Scope列表中包含超大ScopeCount值，使远程RDP服务器崩溃，造成拒绝服务攻击。 0 FreeRDP 1.0.2 厂商补丁： FreeRDP ----- 用户可参考如下厂商提供的安全公告获得补丁信息：...

CVE-2014-0791

Integer overflow in the licensereadscopelist function in libfreerdp/core/license.c in FreeRDP through 1.0.2 allows remote RDP servers to cause a denial of service application crash or possibly have unspecified other impact via a large ScopeCount value in a Scope List in a Server License Request...