CVE-2020-11040

Name of the Vulnerable Software and Affected Versions FreeRDP versions 2.0.0 and earlier

Description The issue is related to an out-of-bound data read from memory in the clear decompress subcode rlex function, which can be visualized on screen as color. This can potentially allow a remote attacker to cause a denial of service.

Recommendations For FreeRDP versions 2.0.0 and earlier, update to version 2.1.0 to resolve the issue. As a temporary workaround, consider restricting access to the clear decompress subcode rlex function until a patch is applied.