When the client specifies a limited set of encodings, it should validate the screen updates sent by the server against that list so that a malicious server can't trigger decoders that the client did not specifically enabled.
Fixed in 08b0741
See also #4943 and #622
When the client specifies a limited set of encodings, it should validate the screen updates sent by the server against that list so that a malicious server can't trigger decoders that the client did not specifically enabled.
Fixed in 08b0741
See also #4943 and #622