NVD

Id
37536  
Name
CVE-2013-1296  
Description
The Remote Desktop ActiveX control in mstscax.dll in Microsoft Remote Desktop Connection Client 6.1 and 7.0 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code via a web page that triggers access to a deleted object, and allows remote RDP servers to execute arbitrary code via unspecified vectors that trigger access to a deleted object, aka "RDP ActiveX Control Remote Code Execution Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-04-09  
Modified Date
2013-11-02  
Seq
2013-1296  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
191103 37536 CVE-2013-1296 oval:org.mitre.oval:def:16598  View
191104 37536 CVE-2013-1296 MS13-029  View
191105 37536 CVE-2013-1296 TA13-100A  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20607 JVNDB-2013-002182 Microsoft リモートデスクトップ接続クライアントにおける任意のコードを実行される脆弱性 Microsoft リモートデスクトップ接続クライアントの mstscax.dll 内の Remote Desktop ActiveX コントロールは、メモリ内のオブジェクトを適切に処理しないため、任意のコードを実行される脆弱性が存在します。 CVE-2013-1296 61238 CVE-2013-1296 37536 9.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002182.html 2013-04-09 2013-04-16 View