Red Hat Security AdvisoryRHSA-2008:0575
rdesktop security update
Released 2008-07-24 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) rdesktop-1.4.1-6, rdesktop-1.4.1-6.i386, rdesktop-1.4.1-6.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) rdesktop-1.4.1-6, rdesktop-1.4.1-6.i386
Fixes 2 records
Priority MEDIUM 55
Integer underflow in the iso_recv_msg function (iso.c) in rdesktop 1.5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Remote Desktop Protocol (RDP) request with a…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.13128 · Published 2008-05-12 · Fixed CWE-189
Priority MEDIUM 50
Integer signedness error in the xrealloc function (rdesktop.c) in RDesktop 1.5.0 allows remote attackers to execute arbitrary code via unknown parameters that trigger a heap-based overflow.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06737 · Published 2008-05-12 · Fixed CWE-189
