tocsin

Debian/rdesktop: unknown

Integer signedness error in the xrealloc function (rdesktop.c) in RDesktop 1.5.0 allows remote attackers to execute arbitrary code via unknown parameters that trigger a heap-based overflow. NOTE: the

Action: Upgrade rdesktop to 1.5.0-4+cvs20071006 or later.

Affected

introducedfixedlast affected
01.5.0-4+cvs20071006-

Fixed versions

1.5.0-4+cvs20071006

Sources

published · modified · JSON