CVE-2020-4031

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.1.2

Description The issue is related to a use-after-free error in the gdi SelectObject component of the FreeRDP protocol implementation. This error occurs when memory is accessed after it has been freed. Exploitation of this issue could allow a remote attacker to cause a denial of service. All FreeRDP clients using compatibility mode with the /relax-order-checks option are affected.

Recommendations For FreeRDP versions prior to 2.1.2, update to version 2.1.2 to resolve the issue. As a temporary workaround, consider disabling the compatibility mode with /relax-order-checks to minimize the risk of exploitation.