Hareh4Ru

Missing authentication for a critical function allows an unauthorized attacker to perform tampering over a network, which can affect the system.

A heap-based buffer overflow in the Remote Desktop Client allows an unauthorized attacker to execute code over a network. A heap-based buffer overflow occurs when a program writes more data to a heap-allocated memory block than it can hold, potentially corrupting adjacent memory.

A heap-based buffer overflow allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. A heap-based buffer overflow occurs when an application writes more data to a heap-allocated memory block than it can hold, potentially corrupting adjacent memory.

An out-of-bounds read in Windows Remote Desktop Protocol (RDP) allows an unauthenticated and unauthorized attacker to disclose information from memory over a network.

A heap-based buffer overflow allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. A heap-based buffer overflow occurs when an application writes more data to a heap-allocated memory block than it can hold, potentially corrupting adjacent memory.

An integer overflow or wraparound in the Windows Win32K - GRFX component allows an unauthorized attacker to execute code locally. An integer overflow occurs when an arithmetic operation attempts to create a numeric value that is too large to be represented within the available storage space.

The issue is related to an integer overflow in the `freerdp bitmap planar context reset` function, leading to a heap-buffer overflow. This affects FreeRDP based clients, while FreeRDP based server implementations and proxy are not affected. A malicious server could prepare a `RDPGFX RESET GRAPHICS PDU` to allocate too small buffers, possibly triggering later out of bound read/write. The buffers are used to display an image, and data extraction over the network is not possible.