CVE-2018-8787

Description

FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdi_Bitmap_Decompress() and results in a memory corruption and probably even a remote code execution.

Weakness classification

• CWE-190: Integer Overflow or Wraparound
• CWE-680: Integer Overflow to Buffer Overflow
• CWE-787: Out-of-bounds Write

Primary references

• cve@checkpoint.com — Third Party Advisory, VDB Entry
• cve@checkpoint.com — Third Party Advisory
• cve@checkpoint.com — Patch, Vendor Advisory
• cve@checkpoint.com — Mailing List, Third Party Advisory
• cve@checkpoint.com — Exploit, Third Party Advisory
• cve@checkpoint.com — Third Party Advisory
• cve@checkpoint.com — Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory