CVE-2017-2835

CVE-2017-2835 : An exploitable code execution vulnerability exists in the RDP receive functionality of FreeRDP, specifically in versions around 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write, leading to an exploitable condition. An attacker could compr...

CVE-2017-2835

Removed by vendor...

CVE-2018-0976

The CVE-2018-0976 entry describes a denial-of-service vulnerability in Windows RDP that can be triggered by specially crafted RDP requests, reportedly affecting Windows 7, Windows Server 2008/2012 families, Windows 8.1, and Windows 10/Server 2016+ clients. The connected documents do not provide c...

Microsoft Windows Multiple Vulnerabilities (KB4093118)

This host is missing a critical security update according to Microsoft KB4093118 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

KLA11221 Multiple vulnerabilities in Microsoft Windows

Multiple serious vulnerabilities have been found in Microsoft Windows . Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information, cause denial of service and possibly to bypass security restrictions. Below is a complete list of...

KLA11896 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, gain privileges, cause denial of service. Below is a complete list of vulnerabilities: 1. A memory corrupti...

Security Updates for Windows Server 2008 (April 2018)

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Windows Adobe Type Manager Font Driver ATMFD.dll when it fails to properly handle objects in memory. An attacker who successfully...

Microsoft Windows Remote Desktop Protocol CVE-2018-0976 Denial of Service Vulnerability

Description Microsoft Windows Remote Desktop Protocol is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause the target service to stop responding, denying service to legitimate users. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems...

LockCrypt ransomware: weakness in code can lead to recovery

At the start of the year, it seemed that 2018 was going to be all about cryptominers. They so overwhelmingly dominated the landscape that it looked like no other threat had a chance. However, ransomware is not giving up the field so fast. There have been new variants popping up every couple of...

Microsoft Windows CredSSP MITM Remote Code Execution (CVE-2018-0886)

A remote code execution vulnerability exists in CredSSP. The vulnerability due to how CredSSP validates request during the authentication process. A remote attacker can exploit this vulnerability by sending a specially crafted RDP request to the target...

CredSSP Flaw in Remote Desktop Protocol Affects All Versions of Windows

A critical vulnerability has been discovered in Credential Security Support Provider protocol CredSSP that affects all versions of Windows to date and could allow remote attackers to exploit RDP and WinRM to steal data and run malicious code. CredSSP protocol has been designed to be used by RDP...

[SECURITY] Fedora 27 Update: xrdp-0.9.5-1.fc27

xrdp provides a fully functional RDP server compatible with a wide range of RDP clients, including FreeRDP and Microsoft RDP client...

[SECURITY] Fedora 26 Update: xrdp-0.9.5-1.fc26

xrdp provides a fully functional RDP server compatible with a wide range of RDP clients, including FreeRDP and Microsoft RDP client...

Gain Windows privileges with FortiClient vpn before logon and untrusted certificate

When the "VPN before logon" feature of FortiClient Windows is enabled disabled by default, and when the server certificate is not valid, it is possible for an attacker without a user account on the targeted Windows workstation to obtain SYSTEM level privileges, via exploiting the Windows "securi...

[SECURITY] Fedora 27 Update: xrdp-0.9.4-2.fc27

xrdp provides a fully functional RDP server compatible with a wide range of RDP clients, including FreeRDP and Microsoft RDP client...

[SECURITY] Fedora 26 Update: xrdp-0.9.4-2.fc26

xrdp provides a fully functional RDP server compatible with a wide range of RDP clients, including FreeRDP and Microsoft RDP client...

[SECURITY] Fedora 25 Update: xrdp-0.9.4-2.fc25

xrdp provides a fully functional RDP server compatible with a wide range of RDP clients, including FreeRDP and Microsoft RDP client...

November 14, 2017—KB4048954 (OS Build 15063.726 and 15063.728)

None None...

Microsoft Windows Remote Desktop Protocol Scanning Attempt

RDP Scanner is a vulnerability scanning product. Remote attackers can use RDP Scanner to detect vulnerabilities on a target server...

Why RDP Connections To Citrix VDA Consume Citrix Connection Licenses?

NOTE: This only applies to on-prem CVAD deployments. This behavior does not apply to CVAD service. Q. Even if there is no ICA session established on CitrixVDA and only RDP session is established, still Citrix Client License is consumed. A. This is an expected behavior. When we install a VDA, it...