CVE-2008-1801
Fixed in a distro release EPSS 13%
Integer underflow in the iso_recv_msg function (iso.c) in rdesktop 1.5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Remote Desktop Protocol (RDP) request with a small length field.
Products: rdesktop
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | rdesktop | 1.5.0-4+cvs20071006 |
| Debian 13 | rdesktop | 1.5.0-4+cvs20071006 |
| Debian 14 | rdesktop | 1.5.0-4+cvs20071006 |
| Debian 4.0 | rdesktop | 1.5.0-1etch2 |
| Red Hat Enterprise Linux 3 | rdesktop | 0:1.2.0-3 |
| Red Hat Enterprise Linux 3 | rdesktop-debuginfo | 0:1.2.0-3 |
| Red Hat Enterprise Linux 4 | rdesktop | 0:1.3.1-9 |
| Red Hat Enterprise Linux 4 | rdesktop-debuginfo | 0:1.3.1-9 |
| Red Hat Enterprise Linux 5 | rdesktop | 0:1.4.1-6 |
| Red Hat Enterprise Linux 5 | rdesktop-debuginfo | 0:1.4.1-6 |
| openSUSE Tumbleweed | rdesktop | 1.9.0-4.6 |