CVE-2005-1794

The Microsoft Terminal Server using Remote Desktop Protocol (RDP) 5.2 is vulnerable to a man-in-the-middle (MiTM) attack due to the unencrypted storage of a hard-coded RSA private key within the mstlsapi.dll library. Because the RDP client fails to properly validate the server's identity during e...

CVE-2013-1296

The CVE-2013-1296 issue affects Microsoft Remote Desktop Connection Client (mstscax.dll) ActiveX in versions 6.1 and 7.0. It is a use-after-free memory access vulnerability that allows remote code execution when a user visits a malicious webpage or when handling objects in memory, yielding the sa...