Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2018-8787

Опубликовано: 29 нояб. 2018
Источник: ubuntu
Приоритет: medium
EPSS Средний
CVSS2: 7.5
CVSS3: 9.8

Описание

FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdi_Bitmap_Decompress() and results in a memory corruption and probably even a remote code execution.

РелизСтатусПримечание
bionic

released

1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1
cosmic

released

1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.10.1
devel

DNE

disco

DNE

esm-apps/bionic

released

1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [1.0.2-2ubuntu1.2]]
esm-infra/xenial

released

1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.3
precise/esm

DNE

trusty

released

1.0.2-2ubuntu1.2
trusty/esm

DNE

trusty was released [1.0.2-2ubuntu1.2]

Показывать по

РелизСтатусПримечание
bionic

released

2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1
cosmic

released

2.0.0~git20180411.1.7a7b1802+dfsg1-2ubuntu0.1
devel

released

2.0.0~git20181120.1.e21b72c95+dfsg1-1
disco

released

2.0.0~git20181120.1.e21b72c95+dfsg1-1
esm-infra-legacy/trusty

DNE

esm-infra/bionic

released

2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1
precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

2.0.0~git20181120.1.e21b72c95+dfsg1-1

Показывать по

EPSS

Процентиль: 94%
0.12733
Средний

7.5 High

CVSS2

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 8.8
redhat
больше 7 лет назад

FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdi_Bitmap_Decompress() and results in a memory corruption and probably even a remote code execution.

CVSS3: 9.8
nvd
около 7 лет назад

FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdi_Bitmap_Decompress() and results in a memory corruption and probably even a remote code execution.

CVSS3: 9.8
debian
около 7 лет назад

FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that l ...

CVSS3: 9.8
github
больше 3 лет назад

FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdi_Bitmap_Decompress() and results in a memory corruption and probably even a remote code execution.

CVSS3: 9.8
fstec
около 7 лет назад

Уязвимость функции gdi_Bitmap_Decompress() RDP-клиента FreeRDP, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код

EPSS

Процентиль: 94%
0.12733
Средний

7.5 High

CVSS2

9.8 Critical

CVSS3