CVE:CVE-2020-11521
CNNVD:CNNVD-202005-820
FreeRDP是FreeRDP团队的一款开源的远程桌面协议（RDP）的实现。
FreeRDP 1.1版本至2.0.0-rc4版本（不包括1.1版本）中的libfreerdp/codec/planar.c文件存在输入验证错误漏洞。攻击者可借助特制文件利用该漏洞在系统上执行任意代码。
solution:Upgrade freerdp freerdp to a higher version than 2.0.0,2.0.0,2.0.0:rc0,2.0.0:rc1,2.0.0:rc2,2.0.0:rc3,2.0.0:rc4,and avoid the version (1.0.0,2.0.0),2.0.0,2.0.0:rc0,2.0.0:rc1,2.0.0:rc2,2.0.0:rc3,2.0.0:rc4; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,19.10,20.04,and avoid the version 16.04,18.04,19.10,20.04; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0