Oval Definition:	oval:org.mitre.oval:tst:37100
Comment: rdesktop is earlier than 0:1.4.1-6 Type: rpminfo_test Namespace: linux Check_Existence: at_least_one_exists Check: at least one State Operator: AND References Object: oval:org.mitre.oval:obj:14647 State: oval:org.mitre.oval:ste:10645 Referencing Definitions Definition ID Class Title Last Modified oval:org.mitre.oval:def:9800 V Integer signedness error in the xrealloc function (rdesktop.c) in RDesktop 1.5.0 allows remote attackers to execute arbitrary code via unknown parameters that trigger a heap-based overflow. NOTE: the role of the channel_process function was not specified by the original researcher. 2013-04-29 oval:org.mitre.oval:def:11570 V Integer underflow in the iso_recv_msg function (iso.c) in rdesktop 1.5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Remote Desktop Protocol (RDP) request with a small length field. 2013-04-29
BACK