CVE

Id
53245  
CVE No.
CVE-2012-0002  
Status
Candidate  
Description
The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process packets in memory, which allows remote attackers to execute arbitrary code by sending crafted RDP packets triggering access to an object that (1) was not properly initialized or (2) is deleted, aka "Remote Desktop Protocol Vulnerability."  
Phase
Assigned (20111109)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
562644 53245 CVE-2012-0002 MISC:http://blogs.quickheal.com/remote-desktop-protocol-vulnerability-cve-2012-0002-not-dead-yet/  View
562645 53245 CVE-2012-0002 MS:MS12-020  View
562646 53245 CVE-2012-0002 URL:http://technet.microsoft.com/security/bulletin/MS12-020  View
562647 53245 CVE-2012-0002 CERT:TA12-073A  View
562648 53245 CVE-2012-0002 URL:http://www.us-cert.gov/cas/techalerts/TA12-073A.html  View
562649 53245 CVE-2012-0002 OVAL:oval:org.mitre.oval:def:14623  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
25339 JVNDB-2012-001046 Microsoft Anti-Cross Site Scripting Library におけるクロスサイトスクリプティング攻撃の脆弱性 Microsoft Anti-Cross Site Scripting (AntiXSS) Library は、Cascading Style Sheets (CSS) エスケープ文字の検出後、適切に文字の検証を行わないため、クロスサイトスクリプティング攻撃を実行される脆弱性が存在します。 CVE-2012-0007 53245 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001046.html  View