CVE-2018-8784

Name of the Vulnerable Software and Affected Versions: FreeRDP versions prior to 2.0.0-rc4

Description: The issue is related to a Heap-Based Buffer Overflow in the zgfx decompress segment() function, which can cause memory corruption and potentially allow for remote code execution. The vulnerability can be exploited by a remote attacker to execute arbitrary code.

Recommendations: For versions prior to 2.0.0-rc4, update to version 2.0.0-rc4 or later to resolve the issue. As a temporary workaround, consider disabling the zgfx decompress segment() function until a patch is available.