CVE-2020-4030

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.1.2

Description The issue is related to an out of bounds read in the TrioParse component of the FreeRDP implementation. This could allow a remote attacker to access confidential data and cause a denial of service due to an integer overflow that bypasses string length checks.

Recommendations For versions prior to 2.1.2, update to version 2.1.2 to resolve the issue. As a temporary workaround, consider restricting access to the TrioParse component until the update is applied.