What is CVE-2008-5904?

CVE-2008-5904 is a vulnerability in Xrdp, classified under Improper Input Validation. Published 2009-01-15.

Is CVE-2008-5904 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Improper input validation in Xrdp

CVE-2008-5904

The rdp_rdp_process_color_pointer_pdu function in rdp/rdp_rdp.c in xrdp 0.4.1 and earlier allows remote RDP servers to have an unknown impact via input data that sets crafted values for certain length variables, leading to a buffer overflow.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.073 (93.8th percentile) — read the EPSS interpretation.

Affected products

Xrdp — versions 0.3, 0.3.1, 0.3.2
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

Public proof-of-concept exploits

References

cve@mitre.org (vendor-advisory, x_refsource_SUSE)
cve@mitre.org (mailing-list, x_refsource_MLIST)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (Exploit, x_refsource_MISC)

Frequently asked questions

What is CVE-2008-5904?: CVE-2008-5904 is a vulnerability in Xrdp, classified under Improper Input Validation. Published 2009-01-15.
Is CVE-2008-5904 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.