Critical RDP Vulnerabilities Enable Remote Code Execution

• •Critical heap overflow and information leak vulnerabilities in FreeRDP.
• •Exploitation allows remote code execution without user credentials.
• •Affected versions include FreeRDP 2.x and 3.x and linked clients like Remmina.

Two significant vulnerabilities in FreeRDP have been reported, allowing remote code execution (RCE) and information leaks. The first vulnerability, a heap overflow, can lead to RCE when exploited in conjunction with a memory leak that exposes uninitialized heap memory. Both vulnerabilities affect FreeRDP versions 2.x and 3.x, as well as clients like Remmina and others that link to libfreerdp. Attackers can exploit these vulnerabilities without needing credentials, posing a severe risk to users who connect to malicious RDP servers. The vulnerabilities have been confirmed in various versions, with specific exploits demonstrated in dynamic tests. Users are urged to apply patches immediately to mitigate these risks. The vulnerabilities have been assigned CVE identifiers but specific CVEs were not disclosed in the articles.