FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

FreeRDP -- Integer overflow in RDPEGFX channel

Affected packages
		freerdp	<	2.2.0

Details

VuXML ID	a955cdb7-d089-11ea-8c6f-080027eedc6a
Discovery	2020-06-25
Entry	2020-07-28

Bernhard Miklautz reports:

Integer overflow due to missing input sanitation in rdpegfx channel

All FreeRDP clients are affected

The input rectangles from the server are not checked against local surface coordinates and blindly accepted. A malicious server can send data that will crash the client later on (invalid length arguments to a memcpy)

[source]

References

CVE Name	CVE-2020-15103
URL	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15103
URL	https://www.freerdp.com/2020/07/20/2_2_0-released