FreeRDP > 1.1.0 & < 2.0.0 Multiple Out-of-Bounds Read Vulnerabilities

FreeRDP is prone to multiple out-of-bounds read vulnerabilities.

The following out-of-bounds read vulnerabilities exist: - Reading an attacker-defined amount of client memory (32bit unsigned -> 4GB) to an intermediate buffer (CVE-2020-11042) - An out-of-bounds read in autodetect_recv_bandwidth_measure_results. A malicious server can extract up to 8 bytes of client memory with a manipulated message by providing a short input and reading the measurement result data (CVE-2020-11047) - An out-of-bounds read of client memory that is then passed on to the protocol parser (CVE-2020-11049)

FreeRDP after 1.1.0 and before 2.0.0.

Checks if a vulnerable version is present on the target host.

Update FreeRDP to version 2.0.0 or later.