CVE-2008-1803: Critical severity ubuntu desktop file utils vulnerability
Published May 12, 2008
·Updated
Integer signedness error in the xrealloc function (rdesktop.c) in RDesktop 1.5.0 allows remote attackers to execute arbitrary code via unknown parameters that trigger a heap-based overflow. NOTE: the role of the channelprocess function was not specified by the original researcher.
Affected Software
1 affected component
rdesktop RDesktop=1.5.0
Remediation
Event History
May 12, 2008
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-1803?
CVE-2008-1803 has a high severity due to the potential for remote code execution caused by a heap-based overflow.
2
How do I fix CVE-2008-1803?
To fix CVE-2008-1803, upgrade to a patched version of RDesktop that resolves the signedness error.
3
What versions of RDesktop are affected by CVE-2008-1803?
CVE-2008-1803 specifically affects RDesktop version 1.5.0.
4
What type of vulnerability is CVE-2008-1803?
CVE-2008-1803 is an integer signedness error that can lead to a heap-based overflow.
5
Can CVE-2008-1803 be exploited remotely?
Yes, CVE-2008-1803 can be exploited remotely, allowing attackers to execute arbitrary code.