CVE-2015-2473

CVE-2015-2473 is an RDP DLL loading remote code execution vulnerability in Windows clients prior to patch MS15-082. The issue arises from untrusted DLL search path: a Trojan horse DLL placed in the user’s current working directory can be loaded when a user opens a crafted RDP file, allowing code ...

PT-2015-5768

Name of the Vulnerable Software and Affected Versions Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 affected versions not specified Description The issue concerns an untrusted search path vulnerability in the client in Remote Desktop Protocol RDP that allows local users to gain privilege...

CVE-2015-2472: Improper Input Validation

Remote Desktop Session Host RDSH in Remote Desktop Protocol RDP through 8.1 in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly verify certificates, which allows...

CVE-2015-2473: Undefined Security Weakness

Untrusted search path vulnerability in the client in Remote Desktop Protocol RDP through 8.1 in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .rdp...

Microsoft RDSH Spoofing Vulnerability

Microsoft Remote Desktop Session Host RDSH is a remote desktop session host released by Microsoft USA. A spoofing vulnerability exists in Microsoft Remote Desktop Session Host RDSH, which can be exploited by an attacker to simulate a client session...

Microsoft RDP DLL Loading Remote Code Execution Vulnerability

Microsoft Remote Desktop Protocol RDP, Remote Desktop Protocol is an American Microsoft Microsoft company based on the Windows system in the multi-channel multi-channel protocol, it can be remotely connected to and control the server or computer. A remote code execution vulnerability exists in...

Microsoft Windows RDP Remote Code Execution Vulnerabilities (3080348)

This host is missing an important security update according to Microsoft Bulletin MS15-082. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Remote Desktop Session Host CVE-2015-2472 Spoofing Vulnerability

Description Microsoft Remote Desktop Session Host is prone to a security vulnerability that may allow attackers to conduct spoofing attacks. Attackers can exploit this issue to spoof and impersonate a legitimate user. Other attacks are also possible. Technologies Affected Microsoft SQL Server 200...

Microsoft Remote Desktop Protocol DLL Loading CVE-2015-2473 Remote Code Execution Vulnerability

Description Microsoft Remote Desktop Protocol is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected...

MS15-082: Vulnerabilities in RDP could allow remote code execution: August 11, 2015

Resolves vulnerabilities in Windows that could allow remote code execution if an attacker first places a specially crafted dynamic link library DLL file in the target user’s current working directory and then convinces the user to open an RDP file or to launch a program that is designed to load a...

MS15-082: Description of the security update for RDP in Windows: August 11, 2015 (KB3075222)

None None...

MS15-082: Vulnerability in RDP Could Allow Remote Code Execution (3080348)

The remote Windows host is missing a security update. It is, therefore affected by the following vulnerabilities : - A spoofing vulnerability exists due to the Remote Desktop Session Host RDSH not properly validating certificates during authentication. An man-in-the-middle attacker can exploit th...

[SECURITY] Fedora 22 Update: xrdp-0.9.0-4.fc22

The goal of this project is to provide a fully functional Linux terminal server, capable of accepting connections from rdesktop and Microsoft's own terminal server / remote desktop clients...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the RDP service on the Windows operating system is related to improper data processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted network packets remotely...

Windows 7/8 and WS2012 RDP Remote Code Execution Exploit 0day

The vulnerability could allow remote code execution if an attacker sends a specially crafted sequence of packets to a targeted system with the Remote Desktop Protocol RDP server service enabled. By default, the RDP server service is not enabled on any Windows operating system. Systems that do not...

Microsoft Windows Arbitrary Code Execution Vulnerability

Microsoft Windows is a series of operating systems designed for personal computer and server users from the American company Microsoft. An arbitrary code execution vulnerability exists in the RDP service of Microsoft Windows. A remote attacker is allowed to execute arbitrary code via a series of...

Microsoft Windows Remote Desktop Remote Code Execution Vulnerability (3073094)

This host is missing a critical security update according to Microsoft Bulletin MS15-067. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2015-2373

The Remote Desktop Protocol RDP server service in Microsoft Windows 7 SP1, Windows 8, and Windows Server 2012 allows remote attackers to execute arbitrary code via a series of crafted packets, aka "Remote Desktop Protocol RDP Remote Code Execution Vulnerability."...

Remote code execution

The Remote Desktop Protocol RDP server service in Microsoft Windows 7 SP1, Windows 8, and Windows Server 2012 allows remote attackers to execute arbitrary code via a series of crafted packets, aka "Remote Desktop Protocol RDP Remote Code Execution Vulnerability."...

CVE-2015-2373

The Remote Desktop Protocol RDP server service in Microsoft Windows 7 SP1, Windows 8, and Windows Server 2012 allows remote attackers to execute arbitrary code via a series of crafted packets, aka "Remote Desktop Protocol RDP Remote Code Execution Vulnerability."...