CVE-2020-11039 HIGH

CVE-2020-11039: Integer Overflow in FreeRDP

Vendor Freerdp

Product FreeRDP

Weakness CWE-190

Published May 29, 2020

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

8.0/10

Attack vector Network

Attack complexity High

Privileges required None

User interaction Required

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N

What the vulnerability does

01Description

In FreeRDP less than or equal to 2.0.0, when using a manipulated server with USB redirection enabled (nearly) arbitrary memory can be read and written due to integer overflows in length checks. This has been patched in 2.1.0.

Key dates

02Disclosure timeline

May 29, 2020 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-11039 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/190.html

Related vulnerabilities

04Related CVE

CVE-2024-55656 RedisBloom Integer Overflow Remote Code Execution Vulnerability CVE-2020-1634 Junos OS: High-End SRX Series: Multicast traffic might cause all FPCs to reset. CVE-2023-40022 Rizin vulnerable to Integer Overflow in C++ demangler logic CVE-2024-30212 Microchip Harmony 3 Core library allows read and write access to RAM via a SCSI READ or WRITE command CVE-2025-11463 Ashlar-Vellum Cobalt XE File Parsing Integer Overflow Remote Code Execution Vulnerability