ZDI-09-057: Microsoft Remote Desktop Client Arbitrary Code Execution Vulnerability

ZDI-09-057: Microsoft Remote Desktop Client Arbitrary Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-057 August 11, 2009 -- CVE ID: CVE-2009-1133 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Remote Desktop -- TippingPointTM IPS Customer Protectio...

Microsoft RDP client multiple security vulnerabilities

Memory corruption in ActiveX control, memory corruption on server reply processing...

Microsoft Remote Desktop Client Arbitrary Code Execution Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Microsoft's Remote Desktop Client. Authentication is not required to exploit this vulnerability. The specific flaw exists within mstscax.dll when parsing packets from an RDP server. A design flaw in the...

Microsoft Remote Desktop Client Connection ActiveX Heap Overflow (MS09-044; CVE-2009-1929)

The Microsoft Remote Desktop Protocol RDP provides remote display and input capabilities over network connections for Microsoft Windows-based applications running on a server. The Remote Desktop Web Connection ActiveX control allows accessing a computer, via the Internet, from another computer...

Microsoft Security Bulletin MS09-044 - Critical Vulnerabilities in Remote Desktop Connection Could Allow Remote Code Execution (970927)

Microsoft Security Bulletin MS09-044 - Critical Vulnerabilities in Remote Desktop Connection Could Allow Remote Code Execution 970927 Published: August 11, 2009 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in Microsoft...

Microsoft Remote Desktop Connection DWORD Heap Overflow (MS09-044; CVE-2009-1133)

A remote code execution vulnerability has been reported in the way Microsoft Remote Desktop Connection processes specific parameters returned by the RDP server. The Microsoft Remote Desktop Protocol RDP provides remote display and input capabilities over network connections for Microsoft...

Mandriva Linux Security Advisory : rdesktop (MDVSA-2008:101)

Several vulnerabilities were discovered in rdesktop, a Remote Desktop Protocol client. An integer underflow vulnerability allowed attackers to cause a denial of service crash and possibly execute arbitrary code with the privileges of the logged-in user CVE-2008-1801. A buffer overflow vulnerabili...

XRDP 0.4.1 - Remote Buffer Overflow (PoC)

XRDP 0.4.1 - Remote Buffer Overflow PoC / XRDP = 0.4.1 pre-auth remote PoC exploit. xrdp.sourceforge.net 01:59:56 root@crateria:/xrdp gcc -w -lssl -lX11 xrdp-poc.c -o xrdp-poc 02:00:29 root@crateria:/xrdp ./xrdp-poc 10.0.0.13 = Connected to 10.0.0.13 = Hit CTRL-C if the progress bar stops. Be...

Microsoft Remote Desktop Protocol (RDP) Detection

A service supporting the Microsoft Remote Desktop Protocol RDP is running at this host. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

RedHat Update for rdesktop RHSA-2008:0575-01

Check for the Version of rdesktop OpenVAS Vulnerability Test RedHat Update for rdesktop RHSA-2008:0575-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Buffer overflow

The rdprdpprocesscolorpointerpdu function in rdp/rdprdp.c in xrdp 0.4.1 and earlier allows remote RDP servers to have an unknown impact via input data that sets crafted values for certain length variables, leading to a buffer overflow...

CVE-2008-5904

The rdprdpprocesscolorpointerpdu function in rdp/rdprdp.c in xrdp 0.4.1 and earlier allows remote RDP servers to have an unknown impact via input data that sets crafted values for certain length variables, leading to a buffer overflow...

CVE-2008-5904

The rdprdpprocesscolorpointerpdu function in rdp/rdprdp.c in xrdp 0.4.1 and earlier allows remote RDP servers to have an unknown impact via input data that sets crafted values for certain length variables, leading to a buffer overflow...

CVE-2008-5405

Stack-based buffer overflow in the RDP protocol password decoder in Cain & Abel 4.9.23 and 4.9.24, and possibly earlier, allows remote attackers to execute arbitrary code via an RDP file containing a long string...

Stack overflow

Stack-based buffer overflow in the RDP protocol password decoder in Cain & Abel 4.9.23 and 4.9.24, and possibly earlier, allows remote attackers to execute arbitrary code via an RDP file containing a long string...

CVE-2008-5405

Stack-based buffer overflow in the RDP protocol password decoder in Cain & Abel 4.9.23 and 4.9.24, and possibly earlier, allows remote attackers to execute arbitrary code via an RDP file containing a long string...

CVE-2008-5405

CVE-2008-5405 refers to a stack-based buffer overflow in the RDP protocol password decoder of Cain & Abel (v4.9.23/4.9.24 and possibly earlier). The vulnerability allows remote code execution when a user opens a specially crafted RDP file containing a long string. Connected sources corroborate ex...

Cain & Abel 4.9.23 (rdp file) Buffer overflow Exploit

No description provided by source. exploit.py print "" print " !R4Q!4N H4CK3R" print "Cain & Abel 4.9.23 rdp file Buffer overflow Exploit" print "By:Encrypt3d.M!nd" print "encrypt3d.blogspot.com" print "" print "Greetz:-=Mizo=-,L!0N,El Mariachi,MiNi SpIder..and all my friends" print "This is...

Cain & Abel 4.9.23 (rdp file) Buffer overflow Exploit

Exploit for unknown platform in category local exploits ===================================================== Cain & Abel 4.9.23 rdp file Buffer overflow Exploit ===================================================== exploit.py print "" print " !R4Q!4N H4CK3R" print "Cain & Abel 4.9.23 rdp file...

Cain & Abel 4.9.23 (rdp file) Buffer Overflow PoC

No description provided by source. exploit.py Cain & Abel v4.9.23 rdp file Buffer Overflow PoC other versions may also affected By:Encrypt3d.M!nd encrypt3d.blogspot.com Greetz:-=Mizo=-,L!0N,El Mariachi,MiNi SpIder Description: When Using Remote Desktop Password Decoder in Cain and Importing ".rdp...