Heap Buffer Overflow in FreeRDP Windows Client

Executive Summary

This is a heap buffer overflow in the FreeRDP Windows client before version 3.29.0. It occurs in the clipboard virtual channel when processing CLIPRDR_FILE_CONTENTS_RESPONSE PDUs. The client fails to validate the server-provided data size against the destination buffer, allowing a malicious RDP server to send a response with a payload much larger than requested. This causes arbitrary heap memory corruption that could lead to remote code execution during paste operations.

Useful 0 Not Useful 0

Impact Analysis

If you use a vulnerable FreeRDP Windows client and connect to a malicious RDP server, an attacker could exploit this flaw to execute arbitrary code on your system with the privileges of the user running FreeRDP. This could allow the attacker to install malware, steal data, or take control of your computer.

Useful 0 Not Useful 0

Mitigation Strategies

Update FreeRDP Windows client to version 3.29.0 or later to address the heap buffer overflow in the clipboard virtual channel.

Useful 0 Not Useful 0