Denial of Service Vulnerability in rdesktop Remote Desktop Protocol
CVE-2008-1801
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC🟣 EPSS 13%
What is CVE-2008-1801?
In rdesktop version 1.5.0, an integer underflow vulnerability exists within the iso_recv_msg function in iso.c. This flaw allows remote attackers to trigger a denial of service condition, causing the application to crash. Additionally, it opens the potential for remote code execution by manipulating a Remote Desktop Protocol (RDP) request with a malformed length field.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.