CVE-2020-11523

Name of the Vulnerable Software and Affected Versions FreeRDP versions > 1.0 through 2.0.0-rc4

Description The issue is caused by an integer overflow in the update recv order function of the FreeRDP RDP client, which can allow a remote attacker to gain unauthorized access to protected information.

Recommendations For FreeRDP versions > 1.0 through 2.0.0-rc4, consider updating to a version that fixes the integer overflow issue in the libfreerdp/gdi/region.c file. At the moment, there is no information about a newer version that contains a fix for this vulnerability.