[ MDVSA-2015:171 ] freerdp

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 _______________________________________________________________________

 Mandriva Linux Security Advisory                         MDVSA-2015:171
 http://www.mandriva.com/en/support/security/
 _______________________________________________________________________

 Package : freerdp
 Date    : March 30, 2015
 Affected: Business Server 2.0
 _______________________________________________________________________

 Problem Description:

 Updated freerdp packages fix security vulnerabilities:
 
 Integer overflows in memory allocations in client/X11/xf_graphics.c in
 FreeRDP through 1.0.2 allows remote RDP servers to have an unspecified
 impact through unspecified vectors (CVE-2014-0250).
 
 Integer overflow in the license_read_scope_list function in
 libfreerdp/core/license.c in FreeRDP through 1.0.2 allows remote RDP
 servers to cause a denial of service (application crash) or possibly
 have unspecified other impact via a large ScopeCount value in a Scope
 List i

Leave a Reply