Gravedad: Crítico
  Identificadores de CVE : CVE-2011-0029,MS11-017
  Fecha recomendada: 21 de julio de 2015

  Descripción

Untrusted search path vulnerability in the client in Microsoft Remote Desktop Connection 5.2, 6.0, 6.1, and 7.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .rdp file, aka "Remote Desktop Insecure Library Loading Vulnerability." nvd: Per: http://cwe.mitre.org/data/definitions/426.html 'CWE-426: Untrusted Search Path'

  Revelación de la información

Apply associated Trend Micro DPI Rules.

  Soluciones

  Trend Micro Deep Security DPI Rule Number: 1004373
  Trend Micro Deep Security DPI Rule Name: 1004373 - Identified Microsoft DLL File Over Network Share

  Software y versión afectados

  • microsoft remote_desktop_connection_client 5.2
  • microsoft remote_desktop_connection_client 6.0
  • microsoft remote_desktop_connection_client 6.1
  • microsoft remote_desktop_connection_client 7.0
  • microsoft windows_2003_server
  • microsoft windows_7 -
  • microsoft windows_server_2003
  • microsoft windows_server_2008
  • microsoft windows_server_2008 -
  • microsoft windows_server_2008 r2
  • microsoft windows_vista
  • microsoft windows_xp
  • microsoft windows_xp -