← Back

Rdesktop

rdesktop

Vendor: Rdesktop • 24 CVEs

CVEs (24)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2011-1595
1Rdesktop
1Rdesktop
Apr 29, 2026
May 24, 2011
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Directory traversal vulnerability in the disk_create function in disk.c in rdesktop before 1.7.0, when disk redirection is enabled, allows remote RDP servers to read or overwrite arbitrary files via a .. (dot dot) in a p...Show more
Directory traversal vulnerability in the disk_create function in disk.c in rdesktop before 1.7.0, when disk redirection is enabled, allows remote RDP servers to read or overwrite arbitrary files via a .. (dot dot) in a pathname.Show less
CVE-2008-1803
1Rdesktop
1Rdesktop
Apr 23, 2026
May 12, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Integer signedness error in the xrealloc function (rdesktop.c) in RDesktop 1.5.0 allows remote attackers to execute arbitrary code via unknown parameters that trigger a heap-based overflow. NOTE: the role of the channel...Show more
Integer signedness error in the xrealloc function (rdesktop.c) in RDesktop 1.5.0 allows remote attackers to execute arbitrary code via unknown parameters that trigger a heap-based overflow. NOTE: the role of the channel_process function was not specified by the original researcher.Show less
CVE-2008-1802
1Rdesktop
1Rdesktop
Apr 23, 2026
May 12, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Buffer overflow in the process_redirect_pdu (rdp.c) function in rdesktop 1.5.0 allows remote attackers to execute arbitrary code via a Remote Desktop Protocol (RDP) redirect request with modified length fields.
CVE-2008-1801
1Rdesktop
1Rdesktop
Apr 23, 2026
May 12, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Integer underflow in the iso_recv_msg function (iso.c) in rdesktop 1.5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Remote Desktop Protocol (RDP) request with a...Show more
Integer underflow in the iso_recv_msg function (iso.c) in rdesktop 1.5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Remote Desktop Protocol (RDP) request with a small length field.Show less