<< Back
CVE Number Vulnerability Product Severity Date
MS11-061 Vulnerability in Remote Desktop Web Access Could Allow Elevation of Privilege (2546250) Windows Server Critical 10-08-2011

Technical Information

Brief overview of the risk:
The vulnerability is a cross-site scripting (XSS) vulnerability that could allow elevation of privilege, enabling an attacker to execute arbitrary commands on the site in the context of the target user.
Detailed Information on the risk:
A reflected XSS vulnerability exists in Remote Desktop Web Access that could allow an attacker to inject a client-side script into the user’s instance of Internet Explorer. This script could spoof content, disclose information, or take any action that the user could take on the Remote Desktop Web Access site.Further information on this exploit is available at : MS11-061

Affected Software

Windows Server 2008 R2 for x64-based Systems and Windows Server 2008 R2 for x64-based Systems Service Pack 1**