CVE-2008-1803

EPSS 16.4%

Published: 5/12/2008Modified: 4/28/2026

Also known as:DEBIAN-CVE-2008-1803

Description

Integer signedness error in the xrealloc function (rdesktop.c) in RDesktop 1.5.0 allows remote attackers to execute arbitrary code via unknown parameters that trigger a heap-based overflow. NOTE: the role of the channel_process function was not specified by the original researcher.

Affected packages (1)

Debian/rdesktopfrom 0, < 1.5.0-4+cvs20071006

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2008-1803