CVE-2011-0900

MEDIO 6.8CVE-2011-0900 · Published 07/02/2011 · updated 16/06/2026

In breve

CVE-2011-0900 è una vulnerabilità MEDIO (CVSS 6.8) che riguarda terminal server client (erick woods).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 5.2%, superiore al 92.5% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
terminal server client erick_woods	`= 0.150`	No fix yet

Description

Stack-based buffer overflow in the tsc_launch_remote function (src/support.c) in Terminal Server Client (tsclient) 0.150, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a .RDP file with a long hostname argument.

References

osvdb.org/70749
secunia.com/advisories/43120 · Vendor Advisory
exploit-db.com/exploits/16095 · Exploit
securityfocus.com/bid/46099 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/65100

Altre vulnerabilità di terminal server client

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free