Code Execution Vulnerability in FreeRDP by FreeRDP Project

CVE-2017-2834

What is CVE-2017-2834?

An exploitable code execution vulnerability occurs in the authentication functionality of FreeRDP 2.0.0-beta1+android11. This vulnerability can be triggered by a specially crafted server response, leading to an out-of-bounds write that may be exploited by an attacker. Such an attack can result in server compromise or be leveraged through man-in-the-middle techniques to achieve code execution.

References