Unrated severityNVD Advisory· Published Jan 15, 2009· Updated Apr 23, 2026

CVE-2008-5903

Description

Array index error in the xrdp_bitmap_def_proc function in xrdp/funcs.c in xrdp 0.4.1 and earlier allows remote attackers to execute arbitrary code via vectors that manipulate the value of the edit_pos structure member.

Affected products

Xrdp/Xrdp5 versions
cpe:2.3:a:xrdp:xrdp:*:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:xrdp:xrdp:*:*:*:*:*:*:*:*range: <=0.4.1
- cpe:2.3:a:xrdp:xrdp:0.3:*:*:*:*:*:*:*
- cpe:2.3:a:xrdp:xrdp:0.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:xrdp:xrdp:0.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:xrdp:xrdp:0.4:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

packetstormsecurity.org/0812-advisories/VA_VD_87_08_XRDP.pdfnvdExploit
lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.htmlnvd
openwall.com/lists/oss-security/2009/01/12/3nvd
www.securityfocus.com/bid/33371nvd
exchange.xforce.ibmcloud.com/vulnerabilities/48093nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000