Integer overflow in the license_read_scope_list function in libfreerdp/core/license.c in FreeRDP through 1.0.2 allows remote RDP servers to cause a denial of service (application crash) or possibly have unspecified other impact via a large ScopeCount value in a Scope List in a Server License Request packet.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Freerdp | Freerdp | 1.0.0 (including) | 1.0.0 (including) |
| Freerdp | Freerdp | 1.0.1 (including) | 1.0.1 (including) |
| Freerdp | Freerdp | 1.0.2 (including) | 1.0.2 (including) |