2 matches found
FreeRDP gdi_SelectObject Data Compromise
The vulnerability of the gdiSelectObject component in the FreeRDP remote desktop protocol implementation is related to the lack of a mechanism for data type conversion. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...
4.3CVSS7.3AI score0.01841EPSS
SaveExploits0References13Affected Software5
PT-2020-5649
Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.1.2 Description The issue is related to a use-after-free error in the gdi SelectObject component of the FreeRDP protocol implementation. This error occurs when memory is accessed after it has been freed. Exploitatio...
7.5CVSS0.02012EPSS
SaveExploits2References171
20