CVE-2020-11039
Published
CVSS v3
8
HIGH
CVSS v2
6
MEDIUM
Affected
1
PROJECT
Description
In FreeRDP less than or equal to 2.0.0, when using a manipulated server with USB redirection enabled (nearly) arbitrary memory can be read and written due to integer overflows in length checks. This has been patched in 2.1.0.