In FreeRDP before version 2.1.2, there is a use-after-free in gdi_SelectObject. All FreeRDP clients using compatibility mode with /relax-order-checks are affected. This is fixed in version 2.1.2.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
freerdp freerdp |
||
fedoraproject fedora 31 |
||
fedoraproject fedora 32 |
||
opensuse leap 15.1 |
||
canonical ubuntu linux 20.04 |
||
canonical ubuntu linux 18.04 |
||
debian debian linux 10.0 |