Code Execution Vulnerability in FreeRDP by FreeRDP Project

CVE-2017-2835

What is CVE-2017-2835?

A code execution vulnerability exists within the RDP receive functionality of FreeRDP 2.0.0-beta1+android11. This flaw can be triggered by a specially crafted server response that leads to an out-of-bounds write, creating an environment where an attacker can exploit the vulnerability either by compromising the server or performing a man-in-the-middle attack. Such exploits could jeopardize the integrity of systems utilizing this remote desktop protocol.

References