27 results · Feed
-
Medium 6.5
rdesktop through 1.9.0 Heap Out-of-Bounds Read via process_raw_bmpcache
rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_raw_bmpcache() in orders.c that allows malicious RDP servers to crash clients. Attackers can send a raw bitmap cache order declaring large width, height, and bpp values with a …
-
Medium 6.5
rdesktop through 1.9.0 Heap Out-of-Bounds Read via process_bmpcache2
rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_bmpcache2() in orders.c that allows malicious RDP servers to crash clients via crafted revision-2 bitmap cache orders. Attackers can send an uncompressed order with large width…
-
Medium 6.5
rdesktop through 1.9.0 Heap Out-of-Bounds Read via process_plane
rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_plane() in bitmap.c that allows malicious RDP servers to crash clients by sending malformed 32 bpp compressed bitmaps. Attackers can declare a large bitmap geometry with a shor…
-
Unscored —
RDesktop version 1.8.4 contains multiple out-of-bound access read vulnerabilities in its code, which results in a denia…
-
Unscored —
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in the function process_demand_active() that…
-
Unscored —
rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in…
-
Unscored —
rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in…
-
Unscored —
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in the function ui_clip_handle_data() that r…
-
Unscored —
rdesktop versions up to and including v1.8.3 contains several Integer Signedness errors that lead to Out-Of-Bounds Read…
-
Unscored —
rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in …
-
Unscored —
rdesktop versions up to and including v1.8.3 contain several Out-Of- Bounds Reads in the file secure.c that result in a…
-
Unscored —
rdesktop versions up to and including v1.8.3 contain a Buffer Overflow over the global variables in the function seamle…
-
Unscored —
rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in…
-
Unscored —
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function process_bitmap_updates() that re…
-
Unscored —
rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in …
-
Unscored —
rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function ui_clip_handle_data() tha…
-
Unscored —
rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function process_plane() that resu…
-
Unscored —
rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to an Out-Of-Bounds Write in functi…
-
Unscored —
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function process_secondary_order() that r…
-
Unscored —
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function cssp_read_tsrequest() that resul…
-
Unscored —
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpdr_process() that results in …
-
Unscored —
rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function cssp_read_tsrequest() tha…
-
Unscored —
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpsnd_process_ping() that resul…
-
Unscored —
Directory traversal vulnerability in the disk_create function in disk.c in rdesktop before 1.7.0, when disk redirection…
-
Unscored —
Integer signedness error in the xrealloc function (rdesktop.c) in RDesktop 1.5.0 allows remote attackers to execute arb…
-
Unscored —
Buffer overflow in the process_redirect_pdu (rdp.c) function in rdesktop 1.5.0 allows remote attackers to execute arbit…
-
Unscored —
Integer underflow in the iso_recv_msg function (iso.c) in rdesktop 1.5.0 allows remote attackers to cause a denial of s…