5695 matches found
March 12, 2019—KB4489891 (Monthly Rollup)
None None...
March 12, 2019—KB4489878 (Monthly Rollup)
None None...
Best Practices Regarding Sharing of a Single User Account Across Multiple Users
Microsoft strongly recommends customers avoid the use of a 'common' or 'shared' Windows logon account. A single user account should never be shared amongst different users. This is especially true when users are logging into the same physical machine. Customers who have solutions designed this wa...
rdesktop: Multiple vulnerabilities
Background rdesktop is a Remote Desktop Protocol RDP Client. Description Multiple vulnerabilities have been discovered in rdesktop. Please review the CVE identifiers referenced below for details. Impact A remote attacker could cause a Denial of Service condition, obtain sensitive information, or...
AutoRDPwn v4.8 - The Shadow Attack Framework
AutoRDPwn is a script created in Powershell and designed to automate the Shadow attack on Microsoft Windows computers. This vulnerability allows a remote attacker to view his victim's desktop without his consent, and even control it on request. For its correct operation, it is necessary to comply...
CVE-2019-8262
UltraVNC revision 1203 has multiple heap buffer overflow vulnerabilities in VNC client code inside Ultra decoder, which results in code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1204...
CVE-2019-8259
UltraVNC revision 1198 contains multiple memory leaks CWE-655 in VNC client code, which allow an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appears to be...
[SECURITY] Fedora 29 Update: freerdp-2.0.0-48.20190228gitce386c8.fc29
The xfreerdp & wlfreerdp Remote Desktop Protocol RDP clients from the Fre eRDP project. xfreerdp & wlfreerdp can connect to RDP servers such as Microsoft Windows machines, xrdp and VirtualBox...
The vulnerability of the “rdpsnd_process_ping” function implementation in the RDP client rdesktop, related to reading beyond the memory boundary, allows a attacker to cause a service failure.
The vulnerability of the “rdpsndprocessping” function in the RDP client rdesktop implementation is related to reading data beyond the memory boundary. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
The vulnerability of the “process_bitmap_updates” function implementation in the RDP client rdesktop software arises from integer overflow, which leads to writing beyond the boundaries of the function. This allows attackers to execute arbitrary code.
The vulnerability of the “processbitmapupdates” function in the RDP client rdesktop implementation is related to integer overflow, which leads to writing beyond the bounds of the function’s capacity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability in the implementation of the “cssp_read_tsrequest” function in the RDP client rdesktop software arises from buffer overflow in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the “csspreadtsrequest” function in the RDP client rdesktop implementation is related to buffer overflow in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
The vulnerability in the implementation of the “process_plane” function in the RDP client rdesktop, related to buffer overflow, allows a hacker to execute arbitrary code.
The vulnerability of the “processplane” function implementation in the RDP client rdesktop is related to buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the “rdpdr_process” function implementation in the RDP client rdesktop, related to reading beyond the memory boundary, allows a attacker to cause a service failure.
The vulnerability of the “rdpdrprocess” function in the RDP client rdesktop implementation is related to reading data beyond the memory boundary. Exploiting this vulnerability could allow a remote attacker to cause service failures...
March 1, 2019—KB4482887 (OS Build 17763.348)
None None...
The vulnerability of the `update_read_bitmap_update` function in the RDP client FreeRDP allows a hacker to execute arbitrary code.
The vulnerability of the updatereadbitmapupdate function in the RDP client FreeRDP is caused by a numerical overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause memory corruption...
February 19, 2019—KB4487016 (Preview of Monthly Rollup)
None None...
Trickbot Malware Goes After Remote Desktop Credentials
The banking trojan known as Trickbot has resurfaced, with an updated info-stealing module that allows it to harvest remote desktop application credentials. According to Trend Micro’s Noel Anthony Llimos and Carl Maverick Pascual, a new variant has recently come on the scene, and is being spread v...
[SECURITY] Fedora 29 Update: rdesktop-1.8.4-2.fc29
rdesktop is an open source client for Windows NT Terminal Server and Windows 2000 & 2003 Terminal Services, capable of natively speaking Remote Desktop Protocol RDP in order to present the user's NT desktop. Unlike Citrix ICA, no server extensions are required...
TAU Threat Intelligence Notification: Java Embedded MSI Files
Summary Application whitelisting provides environments with access controls to stop unauthorized software from executing. This is accomplished by utilizing file and folder attributes including but not limited to file path, filename, digital signature, publisher, cryptographic hash and product nam...
rdesktop out-of-bounds read vulnerability (CNVD-2019-05890)
rdesktop is an open source UNIX client for connecting to Windows Remote Desktop Services. An out-of-bounds read vulnerability exists in the rdpdrprocess function in rdesktop 1.8.3 and earlier. An attacker could exploit this vulnerability to obtain information...