CVE-2008-5904

CVE-2008-5904 describes a buffer overflow vulnerability in the rdp_rdp_process_color_pointer_pdu function of xrdp version 0.4.1 and earlier. This flaw allows a malicious RDP server to achieve an unknown impact on a connecting client by sending crafted input data that manipulates length variables. The vulnerability carries a CVSS score of 7.5, indicating high severity. It is remotely exploitable with low attack complexity and no authentication required, potentially leading to partial confidentiality, integrity, and availability compromise. While not listed on the KEV catalog or Hot List, a Proof-of-Concept exploit is available on ExploitDB. There is no evidence of active exploitation, and the vulnerability has received minimal community discussion or media coverage.