CVE-2008-5903

The CVE-2008-5903 entry applies to xrdp, specifically versions up to 0.4.1, where an array index error in xrdp_bitmap_def_proc (xrdp/funcs.c) can allow a remote attacker to execute arbitrary code by manipulating the edit_pos member. The connected SUSE update notes that a patch (xrdp-458) fixes mu...

CVE-2008-5902

Buffer overflow in the xrdpbitmapinvalidate function in xrdp/xrdpbitmap.c in xrdp 0.4.1 and earlier allows remote attackers to execute arbitrary code via a crafted request...

CVE-2008-5903

Array index error in the xrdpbitmapdefproc function in xrdp/funcs.c in xrdp 0.4.1 and earlier allows remote attackers to execute arbitrary code via vectors that manipulate the value of the editpos structure member...

CVE-2008-5902: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the xrdpbitmapinvalidate function in xrdp/xrdpbitmap.c in xrdp 0.4.1 and earlier allows remote attackers to execute arbitrary code via a crafted request...

CVE-2008-5903: Undefined Security Weakness

Array index error in the xrdpbitmapdefproc function in xrdp/funcs.c in xrdp 0.4.1 and earlier allows remote attackers to execute arbitrary code via vectors that manipulate the value of the editpos structure member...

CVE-2008-5904: Improper Input Validation

The rdprdpprocesscolorpointerpdu function in rdp/rdprdp.c in xrdp 0.4.1 and earlier allows remote RDP servers to have an unknown impact via input data that sets crafted values for certain length variables, leading to a buffer overflow...