Unrated severityNVD Advisory· Published Jan 15, 2009· Updated Apr 23, 2026

CVE-2008-5904

Description

The rdp_rdp_process_color_pointer_pdu function in rdp/rdp_rdp.c in xrdp 0.4.1 and earlier allows remote RDP servers to have an unknown impact via input data that sets crafted values for certain length variables, leading to a buffer overflow.

Affected products

Xrdp/Xrdp5 versions
cpe:2.3:a:xrdp:xrdp:*:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:xrdp:xrdp:*:*:*:*:*:*:*:*range: <=0.4.1
- cpe:2.3:a:xrdp:xrdp:0.3:*:*:*:*:*:*:*
- cpe:2.3:a:xrdp:xrdp:0.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:xrdp:xrdp:0.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:xrdp:xrdp:0.4:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

packetstormsecurity.org/0812-advisories/VA_VD_87_08_XRDP.pdfnvdExploit
lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.htmlnvd
openwall.com/lists/oss-security/2009/01/12/3nvd
exchange.xforce.ibmcloud.com/vulnerabilities/48094nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000