CVE-2008-1801
CVE-2008-1801
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Integer underflow in the iso_recv_msg function (iso.c) in rdesktop 1.5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Remote Desktop Protocol (RDP) request with a small length field.
EPSS 13.1% · Public exploit · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
rdesktop Debian:12
- Affected ranges
- ECOSYSTEM: < 1.5.0-4+cvs20071006
Update to 1.5.0-4+cvs20071006
rdesktop Debian:13
- Affected ranges
- ECOSYSTEM: < 1.5.0-4+cvs20071006
Update to 1.5.0-4+cvs20071006
rdesktop Debian:14
- Affected ranges
- ECOSYSTEM: < 1.5.0-4+cvs20071006
Update to 1.5.0-4+cvs20071006
Original sources
- http://secunia.com/advisories/31224
- http://rdesktop.cvs.sourceforge.net/rdesktop/rdesktop/iso.c?r1=1.19&r2=1.20&pathrev=HEAD
- https://www.exploit-db.com/exploits/5561
- http://secunia.com/advisories/30118
- http://www.ubuntu.com/usn/usn-646-1
- http://security.gentoo.org/glsa/glsa-200806-04.xml
- http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00270.html
- http://secunia.com/advisories/30713
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42272
- http://www.securitytracker.com/id?1019990
- http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.395286
- http://www.debian.org/security/2008/dsa-1573
- http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00244.html
- http://www.redhat.com/support/errata/RHSA-2008-0725.html
- http://www.vupen.com/english/advisories/2008/2403
- http://www.redhat.com/archives/fedora-package-announce/2008-May/msg00296.html
- http://www.securityfocus.com/bid/29097
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-240708-1
- http://secunia.com/advisories/30380
- http://www.vupen.com/english/advisories/2008/1467/references
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:101
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11570
- http://www.redhat.com/support/errata/RHSA-2008-0576.html
- https://nvd.nist.gov/vuln/detail/CVE-2008-1801