CVE-2023-40186
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk63th percentile - higher than 63% of all known CVEs
Summary
FreeRDP, a free implementation of the RDP protocol, has an Integer Overflow vulnerability in the `gdi_CreateSurface` function, leading to Out-Of-Bound Write. This issue affects FreeRDP based clients only and does not affect FreeRDP proxies.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized memory access and potential execution of malicious code, posing a serious security threat to systems using FreeRDP.
Recommendation
It is recommended to upgrade to versions 2.11.0 or 3.0.0-beta3 to mitigate this vulnerability. There are no known workarounds for this issue.
Original NVD description (English source)
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an IntegerOverflow leading to Out-Of-Bound Write Vulnerability in the `gdi_CreateSurface` function. This issue affects FreeRDP based clients only. FreeRDP proxies are not affected as image decoding is not done by a proxy. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this issue.