CVE-2011-0900: Erick Woods Terminal Server Client

Medium severity, CVSS 6.8. EPSS: 5.2% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the tsc_launch_remote function (src/support.c) in Terminal Server Client (tsclient) 0.150, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a .RDP file with a long hostname argument.

Affected products

• Erick Woods Terminal Server Client: version 0.150 only

Published 2011-02-07. Last modified 2026-06-16.