CVE-2011-0901 Multiple stack-based buffer overflows in the tsc_launch_remote function (src/support.c) in Terminal Server Client (tsclient) 0.150, and possibly other versions, allow user-assisted remote attackers to...
MediumCVSS 6.8
EPSS 4.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple stack-based buffer overflows in the tsc_launch_remote function (src/support.c) in Terminal Server Client (tsclient) 0.150, and possibly other versions, allow user-assisted remote attackers to execute arbitrary code via a .RDP file with a long (1) username, (2) password, or (3) domain argument. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| erick woods terminal server client | = 0.150 | No fix listed |
References
- 70749 vdb-entry
- 43120 third-party-advisory vendor-advisory
- terminal-server-username-bo(65101) vdb-entry
- terminal-server-password-bo(65102) vdb-entry
- terminal-server-domain-bo(65103) vdb-entry