CVE-2018-8784CWE-120

CVE-2018-8784: vulnerability in Check Point Software Technologies Ltd. FreeRDP

Published · Updated

Follow this CVE+ Monitor FreeRDP+ Monitor freerdp2

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 7.3%
FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfx_decompress_segment() that results in a memory corruption and probably even a remote code execution.
Affected products
Check Point Software Technologies Ltd. · FreeRDP
Related CVEs — Check Point Software Technologies Ltd. FreeRDP

In the same product, most dangerous first.

CVE-2018-8787—CVE-2018-8787EPSS 8.4%CVE-2018-8786—CVE-2018-8786EPSS 8.2%CVE-2018-8788—CVE-2018-8788EPSS 7.4%CVE-2018-8785—CVE-2018-8785EPSS 7.3%CVE-2018-8789—CVE-2018-8789EPSS 5.2%