CVE-2017-2834: High severity freerdp vulnerability
An exploitable code execution vulnerability exists in the authentication functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write resulting in an exploitable condition. An attacker can compromise the server or use a man in the middle attack to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-2834?
CVE-2017-2834 has a high severity due to its potential for remote code execution.
How do I fix CVE-2017-2834?
To fix CVE-2017-2834, upgrade FreeRDP to a version that addresses this vulnerability.
What versions of FreeRDP are affected by CVE-2017-2834?
CVE-2017-2834 affects FreeRDP version 2.0.0-beta1 only.
Can an attacker exploit CVE-2017-2834 remotely?
Yes, an attacker can exploit CVE-2017-2834 remotely if they can manipulate server responses.
What types of attacks can be executed due to CVE-2017-2834?
CVE-2017-2834 can lead to code execution through a man-in-the-middle attack or by compromising the server.