Allele Security Intelligence - update_read_bitmap

ASA-2019-00068 – FreeRDP: Integer truncation that leads to a heap-based buffer overflow in function update_read_bitmap_update()

Posted on February 11, 2019February 11, 2019 by Allele Security Intelligence in Alerts

FreeRDP prior to version 2.0.0-rc4 contains an integer truncation that leads to a heap-based buffer overflow in function update_read_bitmap_update() and results in a memory corruption and probably even a remote code execution.