IT

Tracker / CVE-2011-0029

CVE-2011-0029

High 7.4

Untrusted search path vulnerability in the client in Microsoft Remote Desktop Connection 5.2, 6.0, 6.1, and 7.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .rdp file, aka "Remote Desktop Insecure Library Loading Vulnerability."

Affected products and versions

microsoft remote_desktop_connection_client
microsoft windows_2003_server
microsoft windows_7
microsoft windows_server_2003
microsoft windows_server_2008
microsoft windows_vista
microsoft windows_xp

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References