CVE-2008-1803 Integer signedness error in the xrealloc function (rdesktop.c) in RDesktop 1.5.0 allows remote attackers to execute arbitrary code via unknown parameters that trigger a heap-based overflow. NOTE: the....
HighCVSS 9.3
EPSS 6.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer signedness error in the xrealloc function (rdesktop.c) in RDesktop 1.5.0 allows remote attackers to execute arbitrary code via unknown parameters that trigger a heap-based overflow. NOTE: the role of the channel_process function was not specified by the original researcher.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rdesktop | = 1.5.0 | No fix listed |
| debian/rdesktop(Debian:12) | < 1.5.0-4+cvs20071006 | 1.5.0-4+cvs20071006 |
| debian/rdesktop(Debian:13) | < 1.5.0-4+cvs20071006 | 1.5.0-4+cvs20071006 |
| debian/rdesktop(Debian:14) | < 1.5.0-4+cvs20071006 | 1.5.0-4+cvs20071006 |
References
- 20080507 Multiple Vendor rdesktop channel_process() Integer Signedness Vulnerability third-party-advisory
- rdesktop.cvs.sourceforge.net exploit
- 30118 third-party-advisory vendor-advisory
- 30248 third-party-advisory vendor-advisory
- 30713 third-party-advisory vendor-advisory
- 31224 third-party-advisory vendor-advisory
- 31928 third-party-advisory vendor-advisory
- GLSA-200806-04 vendor-advisory
- sourceforge.net patch
- 240708 vendor-advisory
- support.avaya.com
- DSA-1573 vendor-advisory
- MDVSA-2008:101 vendor-advisory
- FEDORA-2008-3886 vendor-advisory
- FEDORA-2008-3917 vendor-advisory
- FEDORA-2008-3985 vendor-advisory
- RHSA-2008:0575 vendor-advisory
- 29097 vdb-entry
- 1019992 vdb-entry
- USN-646-1 vendor-advisory
- ADV-2008-1467 vdb-entry vendor-advisory
- ADV-2008-2403 vdb-entry vendor-advisory
- rdesktop-xrealloc-bo(42277) vdb-entry
- oval:org.mitre.oval:def:9800 signature vdb-entry
- Debian Security Tracker CVE-2008-1803 vendor-advisory
- bugs.debian.org issue-tracking