CVE-2008-5904
xrdp < 0.4.1 - Buffer Overflow via Crafted RDP Color Pointer PDU
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-5904. PoCs published by joe walko.
AI-analyzed exploit summary This is a proof-of-concept exploit for CVE-2008-5904, targeting XRDP <= 0.4.1. It demonstrates a remote pre-authentication vulnerability that can crash the XRDP daemon by overwriting EIP, though achieving reliable code execution is hindered by limitations in return address control and modern compiler protections.
Description
The rdp_rdp_process_color_pointer_pdu function in rdp/rdp_rdp.c in xrdp 0.4.1 and earlier allows remote RDP servers to have an unknown impact via input data that sets crafted values for certain length variables, leading to a buffer overflow.
Exploits (1)
This is a proof-of-concept exploit for CVE-2008-5904, targeting XRDP <= 0.4.1. It demonstrates a remote pre-authentication vulnerability that can crash the XRDP daemon by overwriting EIP, though achieving reliable code execution is hindered by limitations in return address control and modern compiler protections.