Microsoft Remote Desktop Protocol Remote Code Execution Vulnerabilities (2671387)

This host is missing a critical security update according to Microsoft Bulletin MS12-020. OpenVAS Vulnerability Test $Id: secpodms12-020.nasl 5341 2017-02-18 16:59:12Z cfi $ Microsoft Remote Desktop Protocol Remote Code Execution Vulnerabilities 2671387 Authors: Rachana Shetty Copyright: Copyrigh...

CVE-2012-0002

The Remote Desktop Protocol RDP implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process packets in memory, which allows remote attackers to execute arbitrary code ...

CVE-2012-0152

The Remote Desktop Protocol RDP service in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service application hang via a series of crafted packets, aka "Terminal Server Denial of Service Vulnerability."...

Denial of service

The Remote Desktop Protocol RDP service in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service application hang via a series of crafted packets, aka "Terminal Server Denial of Service Vulnerability."...

Design/Logic Flaw

The Remote Desktop Protocol RDP implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process packets in memory, which allows remote attackers to execute arbitrary code ...

CVE-2012-0002

CVE-2012-0002 is a Remote Desktop Protocol memory-processing vulnerability in affected Windows platforms (Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2/R2, Windows 7 SP1). The flaw permits remote code execution by sending specially crafted RDP packets tha...

CVE-2012-0002

The Remote Desktop Protocol RDP implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process packets in memory, which allows remote attackers to execute arbitrary code ...

CVE-2012-0152

The Remote Desktop Protocol RDP service in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service application hang via a series of crafted packets, aka "Terminal Server Denial of Service Vulnerability."...

Microsoft Fixes Critical RDP Vulnerability with March Patch Tuesday

Microsoft rolled out six patches addressing seven vulnerabilities on Tuesday, including a critical hole in Windows’ Remote Desktop Protocol RDP – the same component exploited by the Morto worm in August. The March edition of their monthly Patch Tuesday release included a critical bulletin MS12-02...

CVE-2012-0002

The Remote Desktop Protocol RDP implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process packets in memory, which allows remote attackers to execute arbitrary code ...

Microsoft Remote Desktop Protocol Service CVE-2012-0152 Denial of Service Vulnerability

Description Microsoft Remote Desktop Protocol is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the target service to stop responding, denying service to legitimate users. Technologies Affected Avaya Aura Conferencing 6.0 SP1 Standard Avaya Aura...

PT-2012-1181

Name of the Vulnerable Software and Affected Versions Windows Embedded Standard 2009 Microsoft Windows XP SP2 and SP3 Microsoft Windows Server 2003 SP2 Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2, R2, and R2 SP1 Microsoft Windows 7 Gold and SP1 Description A remote code executio...

Microsoft Windows Remote Desktop Protocol Code Execution (MS12-020; CVE-2012-0002)

A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to an error in the way that the Remote Desktop Protocol RDP accesses an object in memory that has been improperly initialized or has been deleted. A remote attacker may exploit this issue by...

Microsoft Remote Desktop Protocol CVE-2012-0002 Remote Code Execution Vulnerability

Description Microsoft Remote Desktop Protocol is prone to a remote code-execution vulnerability. Successful exploits will allow the attacker to execute arbitrary code in the context of the affected process. This may facilitate a complete system compromise. Failed attacks may cause denial-of-servi...

MS12-020: Description of the security update for Remote Desktop Protocol Vulnerability: March 13, 2012

None None...

MS12-020: Vulnerabilities in Remote Desktop could allow remote code execution: March 13, 2012

Resolves vulnerabilities that could allow remote code execution if an attacker sends a sequence of specially crafted RDP packets to an affected system. By default, the Remote Desktop Protocol RDP is not enabled on any Windows operating system. Systems that do not have RDP enabled are not at...

Microsoft RDP Server Private Key Information Disclosure Vulnerability

Remote Desktop Protocol server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Morto Worm spreading via Remote Desktop Protocol

Morto Worm spreading via Remote Desktop Protocol Organizations large and small often make use of Remote Desktop or Terminal Services to remotely connect to Windows computers over the Internet and internally. These tools use Microsoft's RDP protocol to allow the user to operate the remote system...

Morto Worm spreading via Remote Desktop Protocol

Morto Worm spreading via Remote Desktop Protocol Organizations large and small often make use of Remote Desktop or Terminal Services to remotely connect to Windows computers over the Internet and internally. These tools use Microsoft's RDP protocol to allow the user to operate the remote system...

New Worm Morto Using RDP to Infect Windows PCs

A new worm called Morto has begun making the rounds on the Internet in the last couple of days, infecting machines via RDP Remote Desktop Protocol. The worm is generating a large amount of outbound RDP traffic on networks that have infected machines, and Morto is capable of compromising both...