CVE-2014-0791

FreeRDP through 1.0.2 - Integer Overflow in License Scope List Parsing

Title source: llm
STIX 2.1

Description

Integer overflow in the license_read_scope_list function in libfreerdp/core/license.c in FreeRDP through 1.0.2 allows remote RDP servers to cause a denial of service (application crash) or possibly have unspecified other impact via a large ScopeCount value in a Scope List in a Server License Request packet.

References (11)

Core 11
Core References
Mailing List mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2020/08/msg00054.html
Mailing List mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2014/01/02/5
Mailing List vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2016-09/msg00101.html
Mailing List vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2014-07/msg00008.html
Mailing List mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2014/01/03/4
Mailing List vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2016-09/msg00102.html
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2015:171
Issue Tracking x_refsource_misc
https://bugzilla.redhat.com/show_bug.cgi?id=998941
Third Party Advisory x_refsource_confirm
http://advisories.mageia.org/MGASA-2014-0287.html
Issue Tracking x_refsource_misc
https://github.com/FreeRDP/FreeRDP/pull/1649

Scores

EPSS 0.0153
EPSS Percentile 81.5%

Details

CWE
CWE-189
Status published
Products (3)
freerdp/freerdp 1.0.0
freerdp/freerdp 1.0.1
freerdp/freerdp 1.0.2
Published Jan 03, 2014
Tracked Since Feb 18, 2026