CVE-2013-4119

FreeRDP before 1.1.0-beta+2013071101 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by disconnecting before authentication has finished.

Weakness

A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.

Affected Software

Potential Mitigations

References

• http://www.openwall.com/lists/oss-security/2013/07/11/12
• http://www.openwall.com/lists/oss-security/2013/07/12/2
• http://www.securityfocus.com/bid/61072
• https://github.com/FreeRDP/FreeRDP/commit/0773bb9303d24473fe1185d85a424dfe159aff53
• http://www.openwall.com/lists/oss-security/2013/07/11/12
• http://www.openwall.com/lists/oss-security/2013/07/12/2
• http://www.securityfocus.com/bid/61072
• https://github.com/FreeRDP/FreeRDP/commit/0773bb9303d24473fe1185d85a424dfe159aff53