Threats affecting pkg:github/rdesktop

rdesktop versions up to 1.9.0 have a heap out-of-bounds read vulnerability in the process_bmpcache2() function. This flaw allows malicious RDP servers to crash clients by sending specially crafted revision-2 bitmap cache orders with manipulated dimensions or mode values, causing memory reads beyond the buffer and resulting in denial of service.

rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_raw_bmpcache() in orders.c that allows malicious RDP servers to crash clients. Attackers can send a raw bitmap cache order declaring large width, height, and bpp values with a tiny payload, causing memcpy() to read past the receive buffer and crash the client.

rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_plane() in bitmap.c that allows malicious RDP servers to crash clients by sending malformed 32 bpp compressed bitmaps. Attackers can declare a large bitmap geometry with a short compressed body in bitmap update PDUs or bitmap cache orders, causing unbounded reads past the receive buffer and denial of service.