Arbitrary Memory Access Vulnerability in FreeRDP 2.0.0

CVE-2020-11039 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L

In FreeRDP less than or equal to 2.0.0, when using a manipulated server with USB redirection enabled (nearly) arbitrary memory can be read and written due to integer overflows in length checks. This has been patched in 2.1.0.

Learn more about our Cis Benchmark Audit For Server Software.