CVE Number | Vulnerability | Product | Severity | Date |
---|---|---|---|---|
MS14-030 | Vulnerability in Remote Desktop Could Allow Tampering (2969259) | Windows 7 | Important | 11-06-2014 |
Technical Information
Brief overview of the risk:
A tampering vulnerability exists in the Remote Desktop Protocol.
Detailed Information on the risk:
The vulnerability could allow tampering if an attacker gains access to the same network segment as the targeted system during an active Remote Desktop Protocol (RDP) session, and then sends specially crafted RDP packets to the targeted system. By default, RDP is not enabled on any Windows operating system. Systems that do not have RDP enabled are not at risk.
Further information on this exploit is available at : MS14-030
Affected Software
Windows 7 for 32-bit Systems Service Pack 1Windows 7 for x64-based Systems Service Pack 1
Windows 8 for 32-bit Systems
Windows 8 for x64-based Systems
Windows 8.1 for 32-bit Systems
Windows Server 2012
Windows Server 2012 R2
Windows Server 2012 (Server Core installation)