Every CVESearch/Get API key

CVE-2014-0250

Multiple integer overflows in client/X11/xf_graphics.c in FreeRDP allow remote attackers to have...

7.5 HighFix available

CVE-2014-0250 is a high vulnerability (CVSS 7.5) in Freerdp, published July 8, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.67%, the 89th percentile. Fixed in freerdp 1.0.2-2ubuntu1.1.

What does this mean?
Severity
7.5 HighCVSS 2.0, NVD
Exploit chance
3.67%EPSS, 89th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
1.0.2-2ubuntu1.1freerdp +9 more

Description

Multiple integer overflows in client/X11/xf_graphics.c in FreeRDP allow remote attackers to have an unspecified impact via the width and height to the (1) xf_Pointer_New or (2) xf_Bitmap_Decompress function, which causes an incorrect amount of memory to be allocated.

Exploit likelihood

3.67%Up 1.7 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
freerdp
Mageia:3
From an advisory covering 2 CVEs
before 1.0.1-2.1.mga3
1.0.1-2.1.mga3
freerdp
Mageia:4
From an advisory covering 2 CVEs
before 1.0.2-2.1.mga4
1.0.2-2.1.mga4
freerdp
SUSE:Linux Enterprise Desktop 12 SP1
From an advisory covering 3 CVEs
before 1.0.2-9.1
1.0.2-9.1
freerdp
SUSE:Linux Enterprise Software Development Kit 12 SP1
From an advisory covering 3 CVEs
before 1.0.2-9.1
1.0.2-9.1
freerdp
SUSE:Linux Enterprise Workstation Extension 12 SP1
From an advisory covering 3 CVEs
before 1.0.2-9.1
1.0.2-9.1
freerdp
Ubuntu:14.04:LTS
before 1.0.2-2ubuntu1.1, plus listed versions
1.0.2-1ubuntu11.0.2-2ubuntu1
1.0.2-2ubuntu1.1
freerdp
Ubuntu:14.04:LTS
From an advisory covering 8 CVEs
before 1.0.2-2ubuntu1.1, plus listed versions
1.0.2-1ubuntu11.0.2-2ubuntu1
1.0.2-2ubuntu1.1
freerdp
Ubuntu:16.04:LTS
From an advisory covering 8 CVEs
before 1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.2, plus listed versions
1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1
1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.2
freerdp
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
before 2.0.0~git.1463131968.4e66df7-2.5
2.0.0~git.1463131968.4e66df7-2.5
freerdp2
openSUSE:Tumbleweed
From an advisory covering 5 CVEs
before 2.11.5-1.1
2.11.5-1.1

What each source reports

NVD Score used7.5

Multiple integer overflows in client/X11/xf_graphics.c in FreeRDP allow remote attackers to have an unspecified impact via the width and height to the (1) xf_Pointer_New or (2) xf_Bitmap_Decompress function, which causes an incorrect amount of memory to be allocated.

Record
CVE-2014-0250
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-189
Updated
2026-11-02
CVE ListNo score

Multiple integer overflows in client/X11/xf_graphics.c in FreeRDP allow remote attackers to have an unspecified impact via the width and height to the (1) xf_Pointer_New or (2) xf_Bitmap_Decompress function, which causes an incorrect amount of memory to be allocated.

Record
CVE-2014-0250
Updated
2026-11-02
EUVDEUVD-2014-0288No score

Multiple integer overflows in client/X11/xf_graphics.c in FreeRDP allow remote attackers to have an unspecified impact via the width and height to the (1) xf_Pointer_New or (2) xf_Bitmap_Decompress function, which causes an incorrect amount of memory to be allocated.

Record
EUVD-2014-0288
Updated
2026-11-03
GitHub AdvisoriesGHSA-v43r-vxqj-6jccNo score

Multiple integer overflows in client/X11/xf_graphics.c in FreeRDP allow remote attackers to have...

Multiple integer overflows in client/X11/xf_graphics.c in FreeRDP allow remote attackers to have an unspecified impact via the width and height to the (1) xf_Pointer_New or (2) xf_Bitmap_Decompress function, which causes an incorrect amount of memory to be allocated.

Record
GHSA-v43r-vxqj-6jcc
Updated
2026-11-02
OSVMGASA-2014-0287No score

Updated freerdp packages fix two vulnerabilities

Updated freerdp packages fix security vulnerabilities:

Integer overflows in memory allocations in client/X11/xf_graphics.c in FreeRDP through 1.0.2 allows remote RDP servers to have an unspecified impact through unspecified vectors (CVE-2014-0250).

Integer overflow in the license_read_scope_list function in libfreerdp/core/license.c in FreeRDP through 1.0.2 allows remote RDP servers to cause a denial of service (application crash) or possibly have unspecified other impact via a large ScopeCount value in a Scope List in a Server License Request packet (CVE-2014-0791).

Record
MGASA-2014-0287
Updated
2026-11-02
OSVopenSUSE-SU-2024:10110-1No score

freerdp-2.0.0~git.1463131968.4e66df7-2.5 on GA media

These are all security issues fixed in the freerdp-2.0.0~git.1463131968.4e66df7-2.5 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10110-1
Updated
2026-11-02
Show 4 moreShow less
OSVopenSUSE-SU-2024:13816-1No score

freerdp2-devel-2.11.5-1.1 on GA media

These are all security issues fixed in the freerdp2-devel-2.11.5-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13816-1
Updated
2026-11-02
OSVSUSE-SU-2016:2506-1No score

Security update for freerdp

This update for freerdp fixes the following issues:

  • CVE-2013-4118: Added a NULL pointer check to fix a server crash (bsc#829013).
  • CVE-2014-0791: Integer overflow in the license_read_scope_list function in libfreerdp/core/license.c in FreeRDP allowed remote RDP servers to cause a denial of service (application crash) or possibly have unspecified other impact via a large ScopeCount value in a Scope List in a Server License Request packet. (bsc#857491)
  • CVE-2014-0250: Multiple integer overflows in client/X11/xf_graphics.c in FreeRDP allowed remote attackers to have an unspecified impact via the width and height to the (1) xf_Pointer_New or (2) xf_Bitmap_Decompress function, which causes an incorrect amount of memory to be allocated. (bsc#880317)
Record
SUSE-SU-2016:2506-1
Updated
2026-11-02
OSVUBUNTU-CVE-2014-0250No score

Multiple integer overflows in client/X11/xf_graphics.c in FreeRDP allow remote attackers to have an unspecified impact via the width and height to the (1) xf_Pointer_New or (2) xf_Bitmap_Decompress function, which causes an incorrect amount of memory to be allocated.

Record
UBUNTU-CVE-2014-0250
Updated
2026-11-02
OSVUSN-3380-1No score

freerdp vulnerabilities

It was discovered that FreeRDP incorrectly handled certain width and height values. A malicious server could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only applied to Ubuntu 14.04 LTS. (CVE-2014-0250)

It was discovered that FreeRDP incorrectly handled certain values in a Scope List. A malicious server could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2014-0791)

Tyler Bohan discovered that FreeRDP incorrectly handled certain length values. A malicious server could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2017-2834, CVE-2017-2835)

Tyler Bohan discovered that FreeRDP incorrectly handled certain packets. A malicious server could possibly use this issue to cause FreeRDP to crash, resulting in a denial of service. (CVE-2017-2836, CVE-2017-2837, CVE-2017-2838, CVE-2017-2839)

Record
USN-3380-1
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 26 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open