CVE-2008-1801 Integer underflow in the iso_recv_msg function (iso.c) in rdesktop 1.5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Remote Desktop Protocol....
HighCVSS 9.3
EPSS 13.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer underflow in the iso_recv_msg function (iso.c) in rdesktop 1.5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Remote Desktop Protocol (RDP) request with a small length field.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rdesktop | = 1.5.0 | No fix listed |
| debian/rdesktop(Debian:12) | < 1.5.0-4+cvs20071006 | 1.5.0-4+cvs20071006 |
| debian/rdesktop(Debian:13) | < 1.5.0-4+cvs20071006 | 1.5.0-4+cvs20071006 |
| debian/rdesktop(Debian:14) | < 1.5.0-4+cvs20071006 | 1.5.0-4+cvs20071006 |
References
- Debian Security Tracker CVE-2008-1801 vendor-advisory
- bugs.debian.org issue-tracking
- 20080507 Multiple Vendor rdesktop iso_recv_msg() Integer Underflow Vulnerability third-party-advisory
- rdesktop.cvs.sourceforge.net exploit
- 30118 third-party-advisory
- 30248 third-party-advisory
- 30380 third-party-advisory
- 30713 third-party-advisory
- 31222 third-party-advisory
- 31224 third-party-advisory
- 31928 third-party-advisory
- GLSA-200806-04 vendor-advisory
- SSA:2008-148-01 vendor-advisory
- 240708 vendor-advisory
- support.avaya.com
- DSA-1573 vendor-advisory
- MDVSA-2008:101 vendor-advisory
- FEDORA-2008-3886 vendor-advisory
- FEDORA-2008-3917 vendor-advisory
- FEDORA-2008-3985 vendor-advisory
- RHSA-2008:0575 vendor-advisory
- RHSA-2008:0576 vendor-advisory
- RHSA-2008:0725 vendor-advisory
- 29097 vdb-entry
- 1019990 vdb-entry
- USN-646-1 vendor-advisory
- ADV-2008-1467 vdb-entry
- ADV-2008-2403 vdb-entry
- rdesktop-isorecvmsg-code-execution(42272) vdb-entry
- oval:org.mitre.oval:def:11570 signature vdb-entry
- 5561 exploit