PT-2012-2353 · Microsoft · Windows 7+3

Publicado 2012-03-13 · Atualizado 2020-09-28 · CVE-2012-0152

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 R2 and R2 SP1 Microsoft Windows 7 Gold and SP1

Description A denial of service issue exists in the Remote Desktop Protocol (RDP) service, allowing remote attackers to cause the application to hang via crafted packets. This can be exploited to cause the target service to stop responding.

Recommendations For Microsoft Windows Server 2008 R2 and R2 SP1, apply the necessary patch to fix the issue. For Microsoft Windows 7 Gold and SP1, apply the necessary patch to fix the issue. As a temporary workaround, consider restricting access to the RDP service to minimize the risk of exploitation.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2012-0152

Produtos afetados

Windows 7

Windows Server 2008 R2

Remote Desktop Protocol

Windows

Referências · 8

• http://us-cert.gov/cas/techalerts/TA12-073A.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0152 · Nota de Segurança
• http://securityfocus.com/bid/52354 · Nota
• http://securitytracker.com/id?1026790 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-020 · Aviso do Fabricante
• http://technet.microsoft.com/en-us/security/bulletin/MS12-020 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-0152 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14626 · Nota