Description
Multiple integer overflows in client/X11/xf_graphics.c in FreeRDP allow remote attackers to have an unspecified impact via the width and height to the (1) xf_Pointer_New or (2) xf_Bitmap_Decompress function, which causes an incorrect amount of memory to be allocated.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://lists.opensuse.org/opensuse-updates/2014-07/msg00008.html ↗
- https://github.com/FreeRDP/FreeRDP/issues/1871 ↗
- https://github.com/FreeRDP/FreeRDP/pull/1874 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=998934 ↗
- http://security.gentoo.org/glsa/glsa-201412-18.xml ↗
- http://seclists.org/oss-sec/2014/q2/365 ↗
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:171 ↗
- http://advisories.mageia.org/MGASA-2014-0287.html ↗
- http://www.securityfocus.com/bid/67670 ↗