CVE-2018-8788CWE-787

CVE-2018-8788: vulnerability in Check Point Software Technologies Ltd. FreeRDP

Published · Updated

Follow this CVE+ Monitor FreeRDP+ Monitor freerdp2

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 7.4%
FreeRDP prior to version 2.0.0-rc4 contains an Out-Of-Bounds Write of up to 4 bytes in function nsc_rle_decode() that results in a memory corruption and possibly even a remote code execution.
Affected products
Check Point Software Technologies Ltd. · FreeRDP
Related CVEs — Check Point Software Technologies Ltd. FreeRDP

In the same product, most dangerous first.

CVE-2018-8787—CVE-2018-8787EPSS 8.4%CVE-2018-8786—CVE-2018-8786EPSS 8.2%CVE-2018-8784—CVE-2018-8784EPSS 7.3%CVE-2018-8785—CVE-2018-8785EPSS 7.3%CVE-2018-8789—CVE-2018-8789EPSS 5.2%