Rdesktop

rdesktop

24 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVEs (24)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2011-1595 1Rdesktop 1Rdesktop Apr 29, 2026 May 24, 2011 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Directory traversal vulnerability in the disk_create function in disk.c in rdesktop before 1.7.0, when disk redirection is enabled, allows remote RDP servers to read or overwrite arbitrary files via a .. (dot dot) in a p...Show more Directory traversal vulnerability in the disk_create function in disk.c in rdesktop before 1.7.0, when disk redirection is enabled, allows remote RDP servers to read or overwrite arbitrary files via a .. (dot dot) in a pathname.Show less
CVE-2008-1803 1Rdesktop 1Rdesktop Apr 23, 2026 May 12, 2008 N/A· v4 N/A· v3 9.3 HIGH· v2 Integer signedness error in the xrealloc function (rdesktop.c) in RDesktop 1.5.0 allows remote attackers to execute arbitrary code via unknown parameters that trigger a heap-based overflow. NOTE: the role of the channel...Show more Integer signedness error in the xrealloc function (rdesktop.c) in RDesktop 1.5.0 allows remote attackers to execute arbitrary code via unknown parameters that trigger a heap-based overflow. NOTE: the role of the channel_process function was not specified by the original researcher.Show less
CVE-2008-1802 1Rdesktop 1Rdesktop Apr 23, 2026 May 12, 2008 N/A· v4 N/A· v3 9.3 HIGH· v2 Buffer overflow in the process_redirect_pdu (rdp.c) function in rdesktop 1.5.0 allows remote attackers to execute arbitrary code via a Remote Desktop Protocol (RDP) redirect request with modified length fields.
CVE-2008-1801 1Rdesktop 1Rdesktop Apr 23, 2026 May 12, 2008 N/A· v4 N/A· v3 9.3 HIGH· v2 Integer underflow in the iso_recv_msg function (iso.c) in rdesktop 1.5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Remote Desktop Protocol (RDP) request with a...Show more Integer underflow in the iso_recv_msg function (iso.c) in rdesktop 1.5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Remote Desktop Protocol (RDP) request with a small length field.Show less