CVE-2008-1801: Rdesktop

High severity, CVSS 9.3. EPSS: 13.1% chance of exploitation in the next 30 days.

Integer underflow in the iso_recv_msg function (iso.c) in rdesktop 1.5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Remote Desktop Protocol (RDP) request with a small length field.

Affected products

• Rdesktop Rdesktop: version 1.5.0 only

Published 2008-05-12. Last modified 2026-06-16.