PT-2009-3697 · Microsoft · Remote Desktop Connection +1

Name of the Vulnerable Software and Affected Versions: Microsoft Remote Desktop Connection versions 5.0 through 6.1 Remote Desktop Connection Client for Mac version 2.0 Description: A heap-based buffer overflow issue allows remote attackers to execute arbitrary code via unspecified parameters...

Microsoft Remote Desktop Connection Remote Code Execution Vulnerability (969706)

This host is missing a critical security update according to Microsoft Bulletin MS09-044. OpenVAS Vulnerability Test $Id: secpodms09-044.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Remote Desktop Connection Remote Code Execution Vulnerability 969706 Authors: Sharath S Updated By: Madhuri D...

ZDI-09-057: Microsoft Remote Desktop Client Arbitrary Code Execution Vulnerability

ZDI-09-057: Microsoft Remote Desktop Client Arbitrary Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-057 August 11, 2009 -- CVE ID: CVE-2009-1133 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Remote Desktop -- TippingPointTM IPS Customer Protectio...

Microsoft Remote Desktop Connection Remote Code Execution Vulnerability (969706)

This host is missing a critical security update according to Microsoft Bulletin MS09-044. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Remote Desktop Connection DWORD Heap Overflow (MS09-044; CVE-2009-1133)

A remote code execution vulnerability has been reported in the way Microsoft Remote Desktop Connection processes specific parameters returned by the RDP server. The Microsoft Remote Desktop Protocol RDP provides remote display and input capabilities over network connections for Microsoft...

Microsoft Remote Desktop Connection ActiveX Control Heap Based Buffer Overflow Vulnerability

Description Microsoft Remote Desktop Connection ActiveX control is prone to a remote heap-based buffer-overflow vulnerability. Attackers may exploit this issue by enticing an unsuspecting victim to view a malicious webpage. Successful exploits will allow attackers to execute arbitrary code within...

Microsoft Remote Desktop Client Arbitrary Code Execution Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Microsoft's Remote Desktop Client. Authentication is not required to exploit this vulnerability. The specific flaw exists within mstscax.dll when parsing packets from an RDP server. A design flaw in the...

Microsoft Security Bulletin MS09-044 - Critical Vulnerabilities in Remote Desktop Connection Could Allow Remote Code Execution (970927)

Microsoft Security Bulletin MS09-044 - Critical Vulnerabilities in Remote Desktop Connection Could Allow Remote Code Execution 970927 Published: August 11, 2009 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in Microsoft...

Microsoft Remote Desktop Connection Client Heap Based Buffer Overflow Vulnerability

Description Microsoft Remote Desktop Connection client is prone to a heap-based buffer-overflow vulnerability when processing certain parameters returned by a malicious RDP Remote Desktop Protocol server. Successfully exploiting this issue would allow an attacker to corrupt heap memory and execut...

MS09-044: Vulnerabilities in Remote Desktop Connection Could Allow Remote Code Execution (970927)

The remote host contains a version of the Remote Desktop client with several vulnerabilities that may allow an attacker to execute arbirtary code on the remote host. To exploit these vulnerabilities, an attacker would need to lure a user of the remote host to connect to a rogue RDP server. C...

MS09-044: Vulnerabilities in Remote Desktop Connection Could Allow Remote Code Execution (Mac OS X)

The remote host contains a version of the Remote Desktop client that contains several vulnerabilities that may allow an attacker to execute arbitrary code on the remote host. To exploit these vulnerabilities, an attacker would need to trick a user of the remote host into connecting to a rogue RDP...

MS09-044: Description of the security update for Remote Desktop Client version 6.0 and 6.1: August 11, 2009

None None...

How employees evade IT security controls

Prior to January of 2007, I had very little exposure to the vast array of applications that employees use while at work. Sure, I used IM, webmail and listened to music online, but I was being paid to do a job, not entertain myself. After joining Palo Alto Networks, and analyzing 18 months worth o...

Cain and Abel RDP Buffer Overflow

This module exploits a stack-based buffer overflow in the Cain & Abel v4.9.24 and below. An attacker must send the file to victim, and the victim must open the specially crafted RDP file under Tools - Remote Desktop Password Decoder. This module requires Metasploit: https://metasploit.com/downloa...

Mandriva Update for rdesktop MDVSA-2008:101 (rdesktop)

Check for the Version of rdesktop OpenVAS Vulnerability Test Mandriva Update for rdesktop MDVSA-2008:101 rdesktop Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Microsoft Remote Desktop Protocol (RDP) Detection

A service supporting the Microsoft Remote Desktop Protocol RDP is running at this host. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Real VNC: User-assisted execution of arbitrary code

Background Real VNC is a remote desktop viewer display system. Description An unspecified vulnerability has been discovered int the CMsgReader::readRect function in the VNC Viewer component, related to the encoding type of RFB protocol data. Impact A remote attacker could entice a user to connect...

RedHat Update for rdesktop RHSA-2008:0575-01

Check for the Version of rdesktop OpenVAS Vulnerability Test RedHat Update for rdesktop RHSA-2008:0575-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

RedHat Update for rdesktop RHSA-2008:0575-01

Check for the Version of rdesktop OpenVAS Vulnerability Test RedHat Update for rdesktop RHSA-2008:0575-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

RedHat Update for rdesktop RHSA-2008:0725-01

Check for the Version of rdesktop OpenVAS Vulnerability Test RedHat Update for rdesktop RHSA-2008:0725-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...