CVE-2018-8787

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.0.0-rc4

Description The issue is caused by an Integer Overflow in the gdi Bitmap Decompress() function, leading to a Heap-Based Buffer Overflow. This results in memory corruption and potentially allows for remote code execution. The vulnerability can be exploited by a remote attacker to cause a denial of service or execute arbitrary code.

Recommendations For versions prior to 2.0.0-rc4, consider updating to version 2.0.0-rc4 or later to resolve the issue. As a temporary workaround, consider disabling the gdi Bitmap Decompress() function until a patch is available. Restrict access to the RDP client to minimize the risk of exploitation.