vulnerability
CVE-2025-68670: discovering an RCE vulnerability in xrdp
Critical
Summary
This report details a remote code execution (RCE) vulnerability, CVE-2025-68670, discovered in the Kaspersky xrdp server. The vulnerability exists within the xrdp_wm_parse_domain_information function due to a buffer overflow when processing domain names. Kaspersky addressed the issue by patching versions 0.10.5, 0.9.27, and 0.10.4.1, highlighting the importance of regular security assessments and proactive vulnerability management.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data