CVE-2017-2835
24.04.2018, 19:29
An exploitable code execution vulnerability exists in the RDP receive functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write resulting in an exploitable condition. An attacker can compromise the server or use a man in the middle to trigger this vulnerability.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| freerdp | freerdp | 2.0.0:beta1 |
| debian | debian_linux | 8.0 |
| debian | debian_linux | 9.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| freerdp |
| ||||||||||||||||||||||
| freerdp-devel |
| ||||||||||||||||||||||
| freerdp-proxy |
| ||||||||||||||||||||||
| freerdp-server |
| ||||||||||||||||||||||
| libfreerdp2 |
| ||||||||||||||||||||||
| libwinpr2 |
| ||||||||||||||||||||||
| vinagre |
| ||||||||||||||||||||||
| vinagre-lang |
| ||||||||||||||||||||||
| winpr2-devel |
|
Common Weakness Enumeration