Update rollup: Fix printing problems in Windows 7 and Windows Server 2008 R2

Update rollup: Fix printing problems in Windows 7 and Windows Server 2008 R2 Summary of issue fixes This update rollup improves the performance and stability of printing in Windows 7 and Windows Server 2008 R2. It also fixes various printing issues in Picture Manager, Remote Desktop Services RDP,...

An update is available that adds support for DTLS in Windows 7 SP1 and Windows Server 2008 R2 SP1

An update is available that adds support for DTLS in Windows 7 SP1 and Windows Server 2008 R2 SP1 Summary What is DTLS? The DTLS protocol provides communications privacy. The protocol allows client and server applications to communicate in a way that is designed to prevent eavesdropping, tamperin...

Remote Desktop Gateway server crashes during certain user disconnect scenarios in Windows Server 2012 R2

Remote Desktop Gateway server crashes during certain user disconnect scenarios in Windows Server 2012 R2 This article describes an issue in which Remote Desktop RD Gateway server crashes during certain user disconnect scenarios. This issue causes the users to get disconnected and to have trouble...

Update to improve performance degradations in Mstscax.dll in Windows MultiPoint Server 2012

Update to improve performance degradations in Mstscax.dll in Windows MultiPoint Server 2012 About this update This article describes Remote Desktop device redirection performance on Windows Server 2012-based computers, especially Windows MultiPoint Server 2012. When USB redirected devices is used...

You may experience slow logon when services are in start-pending state in Windows Server 2012 R2

You may experience slow logon when services are in start-pending state in Windows Server 2012 R2 This article describes an issue that occurs when you try to log on to Windows Server 2012 R2 by using Remote Desktop Services RDS. You can fix this issue by using the update in this article. Before yo...

August 2016 update rollup for Windows 8.1 and Windows Server 2012 R2

August 2016 update rollup for Windows 8.1 and Windows Server 2012 R2 The August 2016 update rollup includes some new improvements and fixes for the Windows 8.1 and Windows Server 2012 R2 platforms. We recommend that you apply this update rollup as part of your regular maintenance routines. Before...

Licensing servers become deadlocked under high load in Windows Server 2012 R2

Licensing servers become deadlocked under high load in Windows Server 2012 R2 This article describes an issue that typically occurs in a Remote Desktop License server that is running Windows Server 2012 R2 when there are multiple license servers in the deployment and during high load. Before you...

Update to add RDS support for TLS 1.1 and TLS 1.2 in Windows 7 or Windows Server 2008 R2

Update to add RDS support for TLS 1.1 and TLS 1.2 in Windows 7 or Windows Server 2008 R2 About this update This update provides support for Transport Layer Security TLS 1.1 and TLS 1.2 in Windows 7 Service Pack 1 SP1 or Windows Server 2008 R2 SP1 for Remote Desktop Services RDS. For more...

Can't connect to the desktop of Windows 8.1 or Windows Server 2012 R2 from a remote desktop at low screen resolution

Can't connect to the desktop of Windows 8.1 or Windows Server 2012 R2 from a remote desktop at low screen resolution This article describes an issue in which you can't connect to the desktop of Windows 8.1, Windows RT 8.1, or Windows Server 2012 R2 from a remote desktop at low screen resolution. ...

Update for RDP 8.1 is available for Windows 7 SP1

Update for RDP 8.1 is available for Windows 7 SP1 Summary This article describes an update for the Remote Desktop Protocol RDP 8.1 in Windows 7 Service Pack 1 SP1 and Windows Server 2008 R2 SP1. This update package provides the following improvements: Fixes connection reliability issues. Provides...

Access to Internet is denied because proxy settings are overwritten in Windows 7 SP1 or Windows Server 2008 R2 SP1

Access to Internet is denied because proxy settings are overwritten in Windows 7 SP1 or Windows Server 2008 R2 SP1 Symptoms Users can't access Internet when multiple users log on to a Remote Desktop Services RDS server and run Internet Explorer at the same time when proxy settings are managed by...

Error occurs when you use Remote Desktop in Restricted Admin mode in Windows 8.1 or Windows Server 2012 R2

Error occurs when you use Remote Desktop in Restricted Admin mode in Windows 8.1 or Windows Server 2012 R2 This article describes an issue that occurs when you use Remote Desktop in Restricted Admin mode in Windows 8.1, Windows RT 8.1, or Windows Server 2012 R2. An update is available to fix this...

Exploit for Use After Free in Microsoft

This is a PoC Proof of Concept exploit for CVE-2019-0708, a remote code execution vulnerability in Microsoft Windows Remote Desktop Services. The exploit is written in Python and uses the SMBLoris library to send packets to the target host. The exploit is designed to check if a host is vulnerable...

Ransomware Maze

ARCHIVED STORY Ransomware Maze Alexandre Mundo · MAR 26, 2020 Overview The Maze ransomware, previously known in the community as “ChaCha ransomware”, was discovered on May the 29th 2019 by Jerome Segura1. The main goal of the ransomware is to crypt all files that it can in an infected system and...

Ransomware Maze

ARCHIVED STORY Ransomware Maze Alexandre Mundo · MAR 26, 2020 Overview The Maze ransomware, previously known in the community as “ChaCha ransomware”, was discovered on May the 29th 2019 by Jerome Segura1. The main goal of the ransomware is to crypt all files that it can in an infected system and...

Ransomware Maze

ARCHIVED STORY Ransomware Maze Alexandre Mundo · MAR 26, 2020 Overview The Maze ransomware, previously known in the community as “ChaCha ransomware”, was discovered on May the 29th 2019 by Jerome Segura1. The main goal of the ransomware is to crypt all files that it can in an infected system and...

Exploit for Use After Free in Microsoft

PoC exploit for CVE-2019-0708, a vulnerability in the Windows Remote Desktop Client. The target product/service is Windows Remote Desktop Client, and the vulnerability class/vector is a Remote Code Execution RCE vulnerability. The probable entry point is the poc.py script, which is invoked by...

TrickBot Now Exploits Infected PCs to Launch RDP Brute Force Attacks

A new module for TrickBot banking Trojan has recently been discovered in the wild that lets attackers leverage compromised systems to launch brute-force attacks against selected Windows systems running a Remote Desktop Protocol RDP connection exposed to the Internet. The module, dubbed "rdpScanDl...

The vulnerability of the RDP connection manager, Remote Desktop Connection Manager (RDCMan), related to improper processing of XML data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the RDP connection manager, Remote Desktop Connection Manager RDCMan, is related to incorrect processing of XML data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using a file with the RDG...

Exploit for Use After Free in Microsoft

CVE-2019-0708 is a remote code execution vulnerability in Microsoft Windows Remote Desktop Services. This repository contains a proof-of-concept PoC exploit for this vulnerability, as well as a scanner for detecting vulnerable hosts. The PoC exploit is written in Python and uses the SMBLoris...