Cloudanix VulnDB

CVE-2008-1801

None

CVSS

—

EPSS

13.1%

Published

May 12, 2008

CISA due date

—

The record

Integer underflow in the iso_recv_msg function (iso.c) in rdesktop 1.5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Remote Desktop Protocol (RDP) request with a small length field.

Affected packages

Ecosystem Package Introduced Fixed
Debian:11 rdesktop 0 1.5.0-4+cvs20071006
Debian:12 rdesktop 0 1.5.0-4+cvs20071006
Debian:13 rdesktop 0 1.5.0-4+cvs20071006
Debian:4.0 rdesktop 0 1.5.0-1etch2
Red Hat:enterprise_linux:3::as rdesktop 0 0:1.2.0-3
Red Hat:enterprise_linux:3::as rdesktop-debuginfo 0 0:1.2.0-3
Red Hat:enterprise_linux:3::desktop rdesktop 0 0:1.2.0-3
Red Hat:enterprise_linux:3::desktop rdesktop-debuginfo 0 0:1.2.0-3
Red Hat:enterprise_linux:3::es rdesktop 0 0:1.2.0-3
Red Hat:enterprise_linux:3::es rdesktop-debuginfo 0 0:1.2.0-3
Red Hat:enterprise_linux:3::ws rdesktop 0 0:1.2.0-3
Red Hat:enterprise_linux:3::ws rdesktop-debuginfo 0 0:1.2.0-3
Red Hat:enterprise_linux:4::as rdesktop 0 0:1.3.1-9
Red Hat:enterprise_linux:4::as rdesktop-debuginfo 0 0:1.3.1-9
Red Hat:enterprise_linux:4::desktop rdesktop 0 0:1.3.1-9
Red Hat:enterprise_linux:4::desktop rdesktop-debuginfo 0 0:1.3.1-9
Red Hat:enterprise_linux:4::es rdesktop 0 0:1.3.1-9
Red Hat:enterprise_linux:4::es rdesktop-debuginfo 0 0:1.3.1-9
Red Hat:enterprise_linux:4::ws rdesktop 0 0:1.3.1-9
Red Hat:enterprise_linux:4::ws rdesktop-debuginfo 0 0:1.3.1-9
Red Hat:enterprise_linux:5::client rdesktop 0 0:1.4.1-6
Red Hat:enterprise_linux:5::client rdesktop-debuginfo 0 0:1.4.1-6
Red Hat:enterprise_linux:5::server rdesktop 0 0:1.4.1-6
Red Hat:enterprise_linux:5::server rdesktop-debuginfo 0 0:1.4.1-6
openSUSE:Tumbleweed rdesktop 0 1.9.0-4.6

Related vulnerabilities