CVE-2011-0029
09.03.2011, 23:00
Untrusted search path vulnerability in the client in Microsoft Remote Desktop Connection 5.2, 6.0, 6.1, and 7.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .rdp file, aka "Remote Desktop Insecure Library Loading Vulnerability."Enginsight
| Vendor | Product | Version |
|---|---|---|
| microsoft | remote_desktop_connection_client | 5.2 |
| microsoft | remote_desktop_connection_client | 6.0 |
| microsoft | windows_2003_server | * |
| microsoft | windows_server_2003 | * |
| microsoft | windows_xp | - |
| microsoft | remote_desktop_connection_client | 7.0 |
| microsoft | windows_7 | - |
| microsoft | remote_desktop_connection_client | 6.1 |
| microsoft | windows_server_2008 | * |
| microsoft | windows_server_2008 | * |
| microsoft | windows_server_2008 | * |
| microsoft | windows_server_2008 | * |
| microsoft | windows_server_2008 | * |
| microsoft | windows_server_2008 | - |
| microsoft | windows_vista | * |
| microsoft | windows_vista | * |
| microsoft | windows_xp | * |
𝑥
= Vulnerable software versions
References