CVE-2017-2835

Name of the Vulnerable Software and Affected Versions FreeRDP versions 2.0.0-beta1+android11

Description An exploitable code execution issue exists in the RDP receive functionality. A specially crafted server response can cause an out-of-bounds write, resulting in an exploitable condition. An attacker can compromise the server or use a man-in-the-middle to trigger this issue.

Recommendations For FreeRDP version 2.0.0-beta1+android11, consider disabling the RDP receive functionality until a patch is available. Restrict access to the RDP service to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.