CVE Feed

    Dashboard / CVE / CVE-2014-0791

    CVE-2014-0791

    Integer overflow in the license_read_scope_list function in libfreerdp/core/license.c in FreeRDP through 1.0.2 allows remote RDP servers to cause a denial of service (application crash) or possibly have unspecified other impact via a large ScopeCount value in a Scope List in a Server License Request packet.

    Published:Jan 2, 2014
    Last Modified:Apr 11, 2025
    EPS:Jan 3, 2014
    EPSS Score:0.01529
    CVSS Score:6.8

    Affected Products

    Vendor
    Freerdp
    Product
    Freerdp

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-190 Integer Overflow or Wraparound

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-92 Forced Integer Overflow

    Related CVEs

    CVE-2026-85089 (CVSS 7.1) — FreeRDP versions 3.0.0 through 3.30.0 (before 3.31.0) transmit uninitialized heap memory in Save Session Info …
    CVE-2026-85090 (CVSS 5.3) — FreeRDP before 3.31.0 contains a heap out-of-bounds read vulnerability in the general_ChromaV1ToYUV444 functio…
    CVE-2026-69159 (CVSS 5.4) — ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-67306. Reason: This candidate is a duplica…
    CVE-2026-63633 (CVSS 7.7) — FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, freerdp_dsp_decode_opus in l…
    CVE-2026-63652 (CVSS 7.1) — FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, rdpsnd_server_recv_formats i…
    CVE-2026-63117 (CVSS 6.5) — FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, an authenticated RDP client …
    CVE-2026-55192 (CVSS 7.2) — FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP H.264 decoder backen…
    CVE-2026-55194 (CVSS 8.7) — FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, rpc_client_recv_fragment in …
    CVE-2026-55648 (CVSS 6.1) — FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, freerdp_image_copy_from_icon…
    CVE-2026-55193 (CVSS 8.7) — FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP clients using TS Gat…

    References

    http://advisories.mageia.org/MGASA-2014-0287.html
    http://lists.opensuse.org/opensuse-updates/2014-07/msg00008.html
    http://lists.opensuse.org/opensuse-updates/2016-09/msg00101.html
    http://lists.opensuse.org/opensuse-updates/2016-09/msg00102.html
    http://openwall.com/lists/oss-security/2014/01/02/5
    http://openwall.com/lists/oss-security/2014/01/03/4
    http://www.mandriva.com/security/advisories?name=MDVSA-2015:171
    https://bugzilla.redhat.com/show_bug.cgi?id=998941
    https://github.com/FreeRDP/FreeRDP/pull/1649
    https://github.com/sidhpurwala-huzaifa/FreeRDP/commit/e2745807c4c3e0a590c0f69a9b655dc74ebaa03e
    https://lists.debian.org/debian-lts-announce/2020/08/msg00054.html
    http://advisories.mageia.org/MGASA-2014-0287.html
    http://lists.opensuse.org/opensuse-updates/2014-07/msg00008.html
    http://lists.opensuse.org/opensuse-updates/2016-09/msg00101.html
    http://lists.opensuse.org/opensuse-updates/2016-09/msg00102.html
    http://openwall.com/lists/oss-security/2014/01/02/5
    http://openwall.com/lists/oss-security/2014/01/03/4
    http://www.mandriva.com/security/advisories?name=MDVSA-2015:171
    https://bugzilla.redhat.com/show_bug.cgi?id=998941
    https://github.com/FreeRDP/FreeRDP/pull/1649
    https://github.com/sidhpurwala-huzaifa/FreeRDP/commit/e2745807c4c3e0a590c0f69a9b655dc74ebaa03e
    https://lists.debian.org/debian-lts-announce/2020/08/msg00054.html

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High