Threat Intelligence Database

RustDesk versions prior to 1.5.0 contain a vulnerability in the Cliprdr message handler on Linux and macOS where file transfer permissions are not properly validated for incoming file clipboard messages. This allows authenticated remote peers, even if file transfer permissions are disabled, to place files onto the host clipboard and retrieve copied files and clipboard contents from the process-wide clipboard cache.

RustDesk's Windows clipboard redirection contains a vulnerability where a peer-supplied length is copied into a fixed-size buffer without an upper bound check. This can lead to a heap buffer overflow when pasting clipboard file contents from a malicious or compromised remote peer. The flaw originates from improper handling of the requested file contents size, allowing attacker-controlled data to overwrite memory beyond the intended buffer.

A default installation of RustDesk 1.2.3 on Windows places a WDKTestCert certificate under Trusted Root Certification Authorities with Enhanced Key Usage of Code Signing (1.3.6.1.5.5.7.3.3), valid from 2023 until 2033. This is potentially unwanted, e.g., because there is no public documentation of security measures for the private key, and arbitrary software could be signed if the private key were to be compromised. NOTE: the vendor's position is "we do not have EV cert, so we use test cert as a workaround." Insertion into Trusted Root Certification Authorities was the originally intended behavior, and the UI ensured that the certificate installation step (checked by default) was visible to the user before proceeding with the product installation.

CriticalVulnerabilityUnited StatesGermanyChina+7#cve#cve-2024-25140