CVE-2018-8800

rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function uicliphandledata that results in a memory corruption and probably even a remote code execution...

Flaws in Popular RDP Clients Allow Malicious Servers to Reverse Hack PCs

You've always been warned not to share remote access to your computer with any untrusted people for many reasons—it's basic cyber security advice, and common sense, right? But what if I say, you should not even trust anyone who invites or offers you full remote access to their computers? Security...

CVE-2018-8792

CVE-2018-8792 affects rdesktop up to version 1.8.3. The flaw is an out-of-bounds read in cssp_read_tsrequest(), leading to a Denial of Service (segfault). Public advisories indicate upgrading to 1.8.4 or later as the fix. Exploitation details are not described in the provided documents; no in-the...

CVE-2018-8791

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpdrprocess that results in an information leak...

CVE-2018-8799

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function processsecondaryorder that results in a Denial of Service segfault...

CVE-2018-8794

CVE-2018-8794 affects rdesktop up to version 1.8.3. The vulnerability is an integer overflow causing an out-of-bounds write in process_bitmap_updates(), leading to memory corruption and potential remote code execution when connecting to a malicious server. Multiple connected advisories confirm re...

CVE-2018-8793

CVE-2018-8793 affects rdesktop up to version 1.8.3, where a heap-based buffer overflow in cssp_read_tsrequest() causes memory corruption and likely remote code execution. Multiple connected advisories confirm upstream fix to 1.8.4; remediation is to upgrade to 1.8.4 or newer. Exploitation status ...

CVE-2018-8797

rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function processplane that results in a memory corruption and probably even a remote code execution...

CVE-2018-8793

rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function csspreadtsrequest that results in a memory corruption and probably even a remote code execution...

CVE-2018-8799

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function processsecondaryorder that results in a Denial of Service segfault...

CVE-2018-8796

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function processbitmapupdates that results in a Denial of Service segfault...

CVE-2018-8799

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function processsecondaryorder that results in a Denial of Service segfault...

CVE-2018-8794

rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to an Out-Of-Bounds Write in function processbitmapupdates and results in a memory corruption and possibly even a remote code execution...

CVE-2018-8792

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function csspreadtsrequest that results in a Denial of Service segfault...

CVE-2018-8793

rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function csspreadtsrequest that results in a memory corruption and probably even a remote code execution...

CVE-2018-8798

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpsndprocessping that results in an information leak...

CVE-2018-8800

rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function uicliphandledata that results in a memory corruption and probably even a remote code execution...

CVE-2018-8797

CVE-2018-8797 : In rdesktop, a heap-based buffer overflow in function process_plane() (vulnerable in versions up to 1.8.3) can cause memory corruption and probably remote code execution. Public-fix track shows upstream fix in 1.8.4; several distributions (e.g., Debian, Arch Linux, Fedora) release...

CVE-2018-8799

CVE-2018-8799 affects the rdesktop client; multiple sources indicate that versions up to 1.8.3 contain an out-of-bounds read in function process_secondary_order(), leading to a denial of service (segfault). Several connected advisories note that the issue is addressed in the 1.8.4 release series ...

CVE-2018-8792

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function csspreadtsrequest that results in a Denial of Service segfault...