In FreeRDP before version 2.1.2, there is a use-after-free in gdi_SelectObject. All FreeRDP clients using compatibility mode with /relax-order-checks...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

In FreeRDP before version 2.1.2, there is a use-after-free in gdi_SelectObject. All FreeRDP clients using compatibility mode with /relax-order-checks are affected. This is fixed in version 2.1.2.

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Debian:12 freerdp2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2+dfsg1-1"}]}]

参照URL

advisory security-tracker.debian.org