CVE-2008-5903

Common Vulnerabilities and Exposures

CVE-2008-5903 at MITRE

Details

Array index error in the xrdp_bitmap_def_proc function in xrdp/funcs.c in xrdp 0.4.1 and earlier allows remote attackers to execute arbitrary code via vectors that manipulate the value of the edit_pos structure member.

Novell Bugzilla entry: 450898

SUSE Security Advisories:

SUSE-SR:2009:003, published Mon, 02 Feb 2009 16:30:00 +0000
SUSE-SR:2009:003 , published Mon, 02 Feb 2009 16:30:00 +0000

Product(s)	Fixed package version(s)	References
openSUSE 11.1	`xrdp-debuginfo >= 0.4.1-16.6.2` `xrdp-debugsource >= 0.4.1-16.6.2`	SAT Patch Nr: 453
openSUSE 11.1	`xrdp >= 0.4.1-16.6.2`	SAT Patch Nr: 453
openSUSE 11.1	`xrdp-debuginfo >= 0.4.1-16.7.1` `xrdp-debugsource >= 0.4.1-16.7.1`	SAT Patch Nr: 458
openSUSE 11.1	`xrdp >= 0.4.1-16.7.1`	SAT Patch Nr: 458