CVE-2018-8800

Name of the Vulnerable Software and Affected Versions rdesktop versions up to and including v1.8.3

Description The issue is related to a Heap-Based Buffer Overflow in the ui clip handle data() function, which can result in memory corruption and potentially allow for remote code execution. The vulnerability is associated with the implementation of the ui clip handle data function in the rdesktop RDP client. Exploitation of the vulnerability may allow a remote attacker to execute arbitrary code.

Recommendations For rdesktop versions up to and including v1.8.3, update to a version later than v1.8.3 to resolve the issue. As a temporary workaround, consider disabling the ui clip handle data() function until a patch is available.