GLSA-201412-18 : FreeRDP: User-assisted execution of arbitrary code
High Nessus Plugin ID 79971
SynopsisThe remote Gentoo host is missing one or more security-related patches.
DescriptionThe remote host is affected by the vulnerability described in GLSA-201412-18 (FreeRDP: User-assisted execution of arbitrary code)
FreeRDP does not properly validate user-supplied input, which could lead to an integer overflow in the xf_Pointer_New() function.
A remote attacker could execute arbitrary code with the privileges of the process or cause Denial of Service.
There is no known workaround at this time.
SolutionAll FreeRDP users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose '>=net-misc/freerdp-1.1.0_beta1_p20130710-r1'