PT-2019-2758 · Microsoft · Windows Remote Desktop Services+1

Eyal Itkin · Publicado 2019-07-09 · Atualizado 2026-02-07 · CVE-2019-0887

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services (affected versions not specified)

Description A remote code execution issue exists in Remote Desktop Services due to insufficient input validation, allowing an attacker to execute arbitrary code. The vulnerability can be exploited by abusing clipboard redirection. It potentially allows control over the connected RDP client.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Path traversal

Enumeração de Fraquezas

CWE-20

CWE-22

Identificadores relacionados

BDU:2019-02695

CVE-2019-0887

Produtos afetados

Windows

Windows Remote Desktop Services

Referências · 16

• 🔥 https://github.com/t43Wiu6/CVE-2019-0887 · Exploit
• 🔥 https://github.com/qianshuidewajueji/CVE-2019-0887 · Exploit
• https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0887 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-0887 · Aviso do Fabricante
• https://t.me/cybersecuritytechnologies/1135 · Publicação no Telegram
• https://research.checkpoint.com/reverse-rdp-the-hyper-v-connection · Nota
• https://t.me/defcon_news/21180 · Publicação no Telegram
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2019-0887 · Aviso do Fabricante
• https://t.me/secharvester/7100 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2019-02695 · Nota de Segurança
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0887 · Aviso do Fabricante
• https://t.me/sysadm_in_channel/1799 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2019-0887 · Nota de Segurança
• https://t.me/rnetsec/10146 · Publicação no Telegram