p PatchFirst

CVE-2008-1803

CVE-2008-1803

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

Integer signedness error in the xrealloc function (rdesktop.c) in RDesktop 1.5.0 allows remote attackers to execute arbitrary code via unknown parameters that trigger a heap-based overflow. NOTE: the role of the channel_process function was not specified by the original researcher.

EPSS 6.7% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • rdesktop Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.5.0-4+cvs20071006

    Update to 1.5.0-4+cvs20071006

  • rdesktop Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.5.0-4+cvs20071006

    Update to 1.5.0-4+cvs20071006

  • rdesktop Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.5.0-4+cvs20071006

    Update to 1.5.0-4+cvs20071006

Original sources

Check your server →