Design/Logic Flaw

The Remote Desktop full-screen feature in Apple OS X before 10.9 and Apple Remote Desktop before 3.7 sends dialog-box text to a connected remote host upon being woken from sleep, which allows physically proximate attackers to bypass intended access restrictions by entering a command in this box...

CVE-2013-5229

The Remote Desktop full-screen feature in Apple OS X before 10.9 and Apple Remote Desktop before 3.7 sends dialog-box text to a connected remote host upon being woken from sleep, which allows physically proximate attackers to bypass intended access restrictions by entering a command in this box...

CVE-2013-5229

CVE-2013-5229 concerns the Remote Desktop full-screen feature on Apple OS X versions earlier than 10.9 and Apple Remote Desktop older than 3.7. When waking from sleep during a live remote connection, the host dialog box text is sent to the connected remote host instead of the local machine, allow...

CVE-2013-5229

The Remote Desktop full-screen feature in Apple OS X before 10.9 and Apple Remote Desktop before 3.7 sends dialog-box text to a connected remote host upon being woken from sleep, which allows physically proximate attackers to bypass intended access restrictions by entering a command in this box...

Apple OS X authentication issue when recovering from sleep mode

Overview Apple OS X contains an issue with authentication when recovering from sleep mode. This issue exists due to a flaw in the the processing of the text entered in the dialog box upon recovering from sleep mode. Masaki Katayama of Cyber Risks Laboratory Naviplus CO,Ltd. reported this...

JVN#56210048: Apple OS X authentication issue when recovering from sleep mode

Apple OS X contains an issue with authentication when recovering from sleep mode. This issue exists due to a flaw in the the processing of the text entered in the dialog box upon recovering from sleep mode. Impact When Apple Remote Desktop is used in full screen mode and the remote connection is...

The vulnerability of the Windows Embedded Standard 2009 operating system, which allows a perpetrator to trigger a service failure

The Windows Embedded Standard 2009 operating system contains a vulnerability in the kernel mode driver rdpwd.sys, located in the S:\Windows\System32 directory. This driver does not handle dynamic memory correctly, as it is allocated for storing array elements. Using specially crafted requests sen...

CVE-2015-2473

Untrusted search path vulnerability in the client in Remote Desktop Protocol RDP through 8.1 in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .rdp...

CVE-2015-2472

Remote Desktop Session Host RDSH in Remote Desktop Protocol RDP through 8.1 in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly verify certificates, which allows...

Remote code execution

Untrusted search path vulnerability in the client in Remote Desktop Protocol RDP through 8.1 in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .rdp...

Spoofing

Remote Desktop Session Host RDSH in Remote Desktop Protocol RDP through 8.1 in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly verify certificates, which allows...

CVE-2015-2473

CVE-2015-2473 is an RDP DLL loading remote code execution vulnerability in Windows clients prior to patch MS15-082. The issue arises from untrusted DLL search path: a Trojan horse DLL placed in the user’s current working directory can be loaded when a user opens a crafted RDP file, allowing code ...

CVE-2015-2472

Remote Desktop Session Host RDSH in Remote Desktop Protocol RDP through 8.1 in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly verify certificates, which allows...

Microsoft RDSH Spoofing Vulnerability

Microsoft Remote Desktop Session Host RDSH is a remote desktop session host released by Microsoft USA. A spoofing vulnerability exists in Microsoft Remote Desktop Session Host RDSH, which can be exploited by an attacker to simulate a client session...

Microsoft RDP DLL Loading Remote Code Execution Vulnerability

Microsoft Remote Desktop Protocol RDP, Remote Desktop Protocol is an American Microsoft Microsoft company based on the Windows system in the multi-channel multi-channel protocol, it can be remotely connected to and control the server or computer. A remote code execution vulnerability exists in...

Microsoft Windows RDP Remote Code Execution Vulnerabilities (3080348)

This host is missing an important security update according to Microsoft Bulletin MS15-082. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS15-082: Vulnerabilities in RDP could allow remote code execution: August 11, 2015

Resolves vulnerabilities in Windows that could allow remote code execution if an attacker first places a specially crafted dynamic link library DLL file in the target user’s current working directory and then convinces the user to open an RDP file or to launch a program that is designed to load a...

MS15-082: Description of the security update for RDP in Windows: August 11, 2015

None None...

Microsoft Remote Desktop Session Host CVE-2015-2472 Spoofing Vulnerability

Description Microsoft Remote Desktop Session Host is prone to a security vulnerability that may allow attackers to conduct spoofing attacks. Attackers can exploit this issue to spoof and impersonate a legitimate user. Other attacks are also possible. Technologies Affected Microsoft SQL Server 200...

MS15-082: Vulnerability in RDP Could Allow Remote Code Execution (3080348)

The remote Windows host is missing a security update. It is, therefore affected by the following vulnerabilities : - A spoofing vulnerability exists due to the Remote Desktop Session Host RDSH not properly validating certificates during authentication. An man-in-the-middle attacker can exploit th...