CVE-2008-1803
rdesktop rdesktop: no CVSS score yet. EPSS 6.7% chance of exploitation in the next 30 days.
Integer signedness error in the xrealloc function (rdesktop.c) in RDesktop 1.5.0 allows remote attackers to execute arbitrary code via unknown parameters that trigger a heap-based overflow. NOTE: the role of the channel_process function was not specified by the original researcher.
- EPSS
- 6.7% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
- CWE
- CWE-189
- Published
- Modified
- Record from
- the NVD, synced
Affected
- rdesktop:rdesktop