Skip to content
CVE PROGRAM SOURCE RECORD8.0 High

CVE-2020-11039

Integer Overflow in FreeRDP

Description

In FreeRDP less than or equal to 2.0.0, when using a manipulated server with USB redirection enabled (nearly) arbitrary memory can be read and written due to integer overflows in length checks. This has been patched in 2.1.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

FreeRDP FreeRDP

  • <= 2.0.0affected

References