NetSight
IP …
low2.2

CVE-2020-11058

In FreeRDP after 1.1 and before 2.0.0, a stream out-of-bounds seek in rdp_read_font_capability_set could lead to a later out-of-bounds read.

Impact

In FreeRDP after 1.1 and before 2.0.0, a stream out-of-bounds seek in rdp_read_font_capability_set could lead to a later out-of-bounds read. As a result, a manipulated client or server might force a disconnect due to an invalid data read. This has been fixed in 2.0.0.

Affected products

VendorProductAffected versions
FreerdpFreerdp
after 1.1.0 through 2.0.0
CanonicalUbuntu Linux
Versions 16.04, 18.04, 19.10, 20.04
DebianDebian Linux
Versions 9.0, 10.0

Weakness classification

CWE-119CWE-125

References