Integer overflow in the license_read_scope_list function in libfreerdp/core/license.c in FreeRDP through 1.0.2 allows remote RDP servers to cause a denial of service (application crash) or possibly have unspecified other impact via a large ScopeCount value in a Scope List in a Server License Request packet.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Huawei Euleros 2_0_sp2 | — | Upgrade freerdp-libsUpgrade freerdp-pluginsUpgrade freerdp | Dec 4, 2019 | Jan 3, 2014 |
| Huawei Euleros 2_0_sp3 | — | Upgrade freerdp-libsUpgrade freerdp-pluginsUpgrade freerdp | Dec 18, 2019 | Jan 3, 2014 |
| Huawei Euleros 2_0_sp5 | — | Upgrade freerdp-pluginsUpgrade freerdpUpgrade freerdp-libs | Nov 19, 2019 | Jan 3, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 2, 2014 |
| Suse | — | Upgrade freerdpUpgrade libfreerdp2Upgrade freerdp-develUpgrade libfreerdp-1_0Upgrade libfreerdp-1_0-pluginsUpgrade winpr2-develUpgrade libwinpr2 | Dec 18, 2015 | Jan 3, 2014 |
| Ubuntu | — | Upgrade libfreerdp1Upgrade libfreerdp-client1.1 | Aug 7, 2017 | Jan 3, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub