rdesktop records

24 published records for vendor rdesktop.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 13
With a fix record: 100%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

24 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
41Plan	CVE-2008-1801Proof of concept	Integer underflow in the iso_recv_msg function (iso.c) in rdesktop 1.5.0 allows remote attackers to cause a denial of service (crash) and pordesktop · rdesktop · CWE-189 pre-auth RCE	Critical9.3	—	13.1%	May 12, 2008
41Plan	CVE-2008-1802Proof of concept	Buffer overflow in the process_redirect_pdu (rdp.c) function in rdesktop 1.5.0 allows remote attackers to execute arbitrary code via a Remotrdesktop · rdesktop · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	13.0%	May 12, 2008
41Plan	CVE-2018-20182No exploit	rdesktop versions up to and including v1.8.3 contain a Buffer Overflow over the global variables in the function seamless_process_line() thardesktop · rdesktop · CWE-119 pre-auth RCE Memory safety	Critical9.8	—	8.2%	Mar 15, 2019
41Plan	CVE-2018-20180No exploit	rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function rdpsnddrdesktop · rdesktop · CWE-191 pre-auth RCE Memory safety	Critical9.8	—	8.2%	Mar 15, 2019
41Plan	CVE-2018-20181No exploit	rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function seamlesrdesktop · rdesktop · CWE-191 pre-auth RCE Memory safety	Critical9.8	—	8.2%	Mar 15, 2019
41Plan	CVE-2018-20177No exploit	rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in the function rdp_in_urdesktop · rdesktop · CWE-190 pre-auth RCE Memory safety	Critical9.8	—	7.9%	Mar 15, 2019
41Plan	CVE-2018-8795No exploit	rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in function process_bitmrdesktop · rdesktop · CWE-680 pre-auth RCE	Critical9.8	—	7.4%	Feb 5, 2019
41Plan	CVE-2018-8793No exploit	rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function cssp_read_tsrequest() that results in a memoryrdesktop · rdesktop · CWE-122 pre-auth RCE Memory safety	Critical9.8	—	7.1%	Feb 5, 2019
41Plan	CVE-2018-8797No exploit	rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function process_plane() that results in a memory corrurdesktop · rdesktop · CWE-122 pre-auth RCE Memory safety	Critical9.8	—	7.1%	Feb 5, 2019
41Plan	CVE-2018-8800No exploit	rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function ui_clip_handle_data() that results in a memoryrdesktop · rdesktop · CWE-122 pre-auth RCE Memory safety	Critical9.8	—	7.1%	Feb 5, 2019
41Plan	CVE-2018-20179No exploit	rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function lspci_prdesktop · rdesktop · CWE-191 pre-auth RCE Memory safety	Critical9.8	—	6.8%	Mar 15, 2019
41Plan	CVE-2018-8794No exploit	rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to an Out-Of-Bounds Write in function process_bitmap_updrdesktop · rdesktop · CWE-680 pre-auth RCE	Critical9.8	—	6.7%	Feb 5, 2019
39Monitor	CVE-2008-1803No exploit	Integer signedness error in the xrealloc function (rdesktop.c) in RDesktop 1.5.0 allows remote attackers to execute arbitrary code via unknordesktop · rdesktop · CWE-189 pre-auth RCE	Critical9.3	—	6.7%	May 12, 2008
31Monitor	CVE-2018-20178No exploit	rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in the function process_demand_active() that results in a Denial rdesktop · rdesktop · CWE-125 Pre-auth Memory safety Denial of service	High7.5	—	4.3%	Mar 15, 2019
31Monitor	CVE-2018-20175No exploit	rdesktop versions up to and including v1.8.3 contains several Integer Signedness errors that lead to Out-Of-Bounds Reads in the file mcs.c ardesktop · rdesktop · CWE-125 Pre-auth Memory safety Denial of service	High7.5	—	4.3%	Mar 15, 2019
31Monitor	CVE-2018-8792No exploit	rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function cssp_read_tsrequest() that results in a Denial of Serrdesktop · rdesktop · CWE-126 Pre-auth Denial of service	High7.5	—	4.1%	Feb 5, 2019
31Monitor	CVE-2018-8796No exploit	rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function process_bitmap_updates() that results in a Denial of rdesktop · rdesktop · CWE-126 Pre-auth Denial of service	High7.5	—	4.1%	Feb 5, 2019
31Monitor	CVE-2018-8799No exploit	rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function process_secondary_order() that results in a Denial ofrdesktop · rdesktop · CWE-126 Pre-auth Denial of service	High7.5	—	4.1%	Feb 5, 2019
31Monitor	CVE-2018-8798No exploit	rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpsnd_process_ping() that results in an information rdesktop · rdesktop · CWE-126 Pre-auth	High7.5	—	3.8%	Feb 5, 2019
31Monitor	CVE-2018-8791No exploit	rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpdr_process() that results in an information leak.rdesktop · rdesktop · CWE-126 Pre-auth	High7.5	—	3.8%	Feb 5, 2019
31Monitor	CVE-2018-20176No exploit	rdesktop versions up to and including v1.8.3 contain several Out-Of- Bounds Reads in the file secure.c that result in a Denial of Service (srdesktop · rdesktop · CWE-125 Pre-auth Memory safety Denial of service	High7.5	—	3.6%	Mar 15, 2019
31Monitor	CVE-2018-20174No exploit	rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in the function ui_clip_handle_data() that results in an informatrdesktop · rdesktop · CWE-125 Pre-auth Memory safety	High7.5	—	3.5%	Mar 15, 2019
30Monitor	CVE-2019-15682No exploit	RDesktop version 1.8.4 contains multiple out-of-bound access read vulnerabilities in its code, which results in a denial of service (DoS) cordesktop · rdesktop · CWE-125 Pre-auth Memory safety Denial of service	High7.5	—	1.4%	Oct 30, 2019
17Monitor	CVE-2011-1595No exploit	Directory traversal vulnerability in the disk_create function in disk.c in rdesktop before 1.7.0, when disk redirection is enabled, allows rrdesktop · rdesktop · CWE-22 Path traversal	Medium4.3	—	1.1%	May 24, 2011

CVE-2008-1801
41Plan
Integer underflow in the iso_recv_msg function (iso.c) in rdesktop 1.5.0 allows remote attackers to cause a denial of service (crash) and po
CriticalCVSS 9.3Proof of conceptEPSS 13%
- pre-auth RCE
rdesktop · rdesktopMay 12, 2008
CVE-2008-1802
41Plan
Buffer overflow in the process_redirect_pdu (rdp.c) function in rdesktop 1.5.0 allows remote attackers to execute arbitrary code via a Remot
CriticalCVSS 9.3Proof of conceptEPSS 13%
- pre-auth RCE
- Memory safety
rdesktop · rdesktopMay 12, 2008
CVE-2018-20182
41Plan
rdesktop versions up to and including v1.8.3 contain a Buffer Overflow over the global variables in the function seamless_process_line() tha
CriticalCVSS 9.8No exploitEPSS 8%
- pre-auth RCE
- Memory safety
rdesktop · rdesktopMar 15, 2019
CVE-2018-20180
41Plan
rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function rdpsndd
CriticalCVSS 9.8No exploitEPSS 8%
- pre-auth RCE
- Memory safety
rdesktop · rdesktopMar 15, 2019
CVE-2018-20181
41Plan
rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function seamles
CriticalCVSS 9.8No exploitEPSS 8%
- pre-auth RCE
- Memory safety
rdesktop · rdesktopMar 15, 2019
CVE-2018-20177
41Plan
rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in the function rdp_in_u
CriticalCVSS 9.8No exploitEPSS 8%
- pre-auth RCE
- Memory safety
rdesktop · rdesktopMar 15, 2019
CVE-2018-8795
41Plan
rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in function process_bitm
CriticalCVSS 9.8No exploitEPSS 7%
- pre-auth RCE
rdesktop · rdesktopFeb 5, 2019
CVE-2018-8793
41Plan
rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function cssp_read_tsrequest() that results in a memory
CriticalCVSS 9.8No exploitEPSS 7%
- pre-auth RCE
- Memory safety
rdesktop · rdesktopFeb 5, 2019
CVE-2018-8797
41Plan
rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function process_plane() that results in a memory corru
CriticalCVSS 9.8No exploitEPSS 7%
- pre-auth RCE
- Memory safety
rdesktop · rdesktopFeb 5, 2019
CVE-2018-8800
41Plan
rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function ui_clip_handle_data() that results in a memory
CriticalCVSS 9.8No exploitEPSS 7%
- pre-auth RCE
- Memory safety
rdesktop · rdesktopFeb 5, 2019
CVE-2018-20179
41Plan
rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function lspci_p
CriticalCVSS 9.8No exploitEPSS 7%
- pre-auth RCE
- Memory safety
rdesktop · rdesktopMar 15, 2019
CVE-2018-8794
41Plan
rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to an Out-Of-Bounds Write in function process_bitmap_upd
CriticalCVSS 9.8No exploitEPSS 7%
- pre-auth RCE
rdesktop · rdesktopFeb 5, 2019
CVE-2008-1803
39Monitor
Integer signedness error in the xrealloc function (rdesktop.c) in RDesktop 1.5.0 allows remote attackers to execute arbitrary code via unkno
CriticalCVSS 9.3No exploitEPSS 7%
- pre-auth RCE
rdesktop · rdesktopMay 12, 2008
CVE-2018-20178
31Monitor
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in the function process_demand_active() that results in a Denial
HighCVSS 7.5No exploitEPSS 4%
- Pre-auth
- Memory safety
- Denial of service
rdesktop · rdesktopMar 15, 2019
CVE-2018-20175
31Monitor
rdesktop versions up to and including v1.8.3 contains several Integer Signedness errors that lead to Out-Of-Bounds Reads in the file mcs.c a
HighCVSS 7.5No exploitEPSS 4%
- Pre-auth
- Memory safety
- Denial of service
rdesktop · rdesktopMar 15, 2019
CVE-2018-8792
31Monitor
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function cssp_read_tsrequest() that results in a Denial of Ser
HighCVSS 7.5No exploitEPSS 4%
- Pre-auth
- Denial of service
rdesktop · rdesktopFeb 5, 2019
CVE-2018-8796
31Monitor
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function process_bitmap_updates() that results in a Denial of
HighCVSS 7.5No exploitEPSS 4%
- Pre-auth
- Denial of service
rdesktop · rdesktopFeb 5, 2019
CVE-2018-8799
31Monitor
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function process_secondary_order() that results in a Denial of
HighCVSS 7.5No exploitEPSS 4%
- Pre-auth
- Denial of service
rdesktop · rdesktopFeb 5, 2019
CVE-2018-8798
31Monitor
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpsnd_process_ping() that results in an information
HighCVSS 7.5No exploitEPSS 4%
- Pre-auth
rdesktop · rdesktopFeb 5, 2019
CVE-2018-8791
31Monitor
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpdr_process() that results in an information leak.
HighCVSS 7.5No exploitEPSS 4%
- Pre-auth
rdesktop · rdesktopFeb 5, 2019
CVE-2018-20176
31Monitor
rdesktop versions up to and including v1.8.3 contain several Out-Of- Bounds Reads in the file secure.c that result in a Denial of Service (s
HighCVSS 7.5No exploitEPSS 4%
- Pre-auth
- Memory safety
- Denial of service
rdesktop · rdesktopMar 15, 2019
CVE-2018-20174
31Monitor
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in the function ui_clip_handle_data() that results in an informat
HighCVSS 7.5No exploitEPSS 4%
- Pre-auth
- Memory safety
rdesktop · rdesktopMar 15, 2019
CVE-2019-15682
30Monitor
RDesktop version 1.8.4 contains multiple out-of-bound access read vulnerabilities in its code, which results in a denial of service (DoS) co
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Memory safety
- Denial of service
rdesktop · rdesktopOct 30, 2019
CVE-2011-1595
17Monitor
Directory traversal vulnerability in the disk_create function in disk.c in rdesktop before 1.7.0, when disk redirection is enabled, allows r
MediumCVSS 4.3No exploitEPSS 1%
- Path traversal
rdesktop · rdesktopMay 24, 2011