漏洞标题
FreeRDP 超边界读取 nsc_rle_decompress_data
漏洞描述信息
FreeRDP 在 nsc_rle_decompress_data 中的越界读取
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
漏洞类别
跨界内存读
漏洞标题
FreeRDP Out-Of-Bounds Read in nsc_rle_decompress_data
漏洞描述信息
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the `nsc_rle_decompress_data` function. The Out-Of-Bounds Read occurs because it processes `context->Planes` without checking if it contains data of sufficient length. Should an attacker be able to leverage this vulnerability they may be able to cause a crash. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS信息
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
漏洞类别
跨界内存读
漏洞标题
FreeRDP 缓冲区错误漏洞
漏洞描述信息
FreeRDP是FreeRDP团队的一款开源的远程桌面协议（RDP）的实现。 FreeRDP 存在缓冲区错误漏洞，该漏洞源于 nsc_rle_decompress_data 函数中处理 `context->Planes` 时没有检查它是否包含足够长度的数据。
CVSS信息
N/A
漏洞类别
缓冲区错误