Out-of-bounds Write Vulnerability in FreeRDP Affected by RSA Crypto Function
CVE-2020-13398
8.3HIGH
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2020-13398?
An out-of-bounds write vulnerability was identified in the FreeRDP project prior to version 2.1.1. The issue exists within the crypto_rsa_common function located in libfreerdp/crypto/crypto.c. This flaw may allow an attacker to potentially exploit memory corruption issues, affecting the integrity of the application and potentially leading to arbitrary code execution.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.