Skip to content
CVE PROGRAM SOURCE RECORD2.2 Low

CVE-2020-11058

Improper Restriction of Operations within the Bounds of a Memory Buffer in FreeRDP

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

In FreeRDP after 1.1 and before 2.0.0, a stream out-of-bounds seek in rdp_read_font_capability_set could lead to a later out-of-bounds read. As a result, a manipulated client or server might force a disconnect due to an invalid data read. This has been fixed in 2.0.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

FreeRDP FreeRDP

  • > 1.1, < 2.0.0affected

References