PT-2012-2353 · Microsoft · Windows 7+3

Published 2012-03-13 · Updated 2020-09-28 · CVE-2012-0152

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 R2 and R2 SP1 Microsoft Windows 7 Gold and SP1

Description A denial of service issue exists in the Remote Desktop Protocol (RDP) service, allowing remote attackers to cause the application to hang via crafted packets. This can be exploited to cause the target service to stop responding.

Recommendations For Microsoft Windows Server 2008 R2 and R2 SP1, apply the necessary patch to fix the issue. For Microsoft Windows 7 Gold and SP1, apply the necessary patch to fix the issue. As a temporary workaround, consider restricting access to the RDP service to minimize the risk of exploitation.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2012-0152

Affected Products

Windows 7

Windows Server 2008 R2

Remote Desktop Protocol

Windows

References · 8

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0152 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-020 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-0152 · Security Note
• http://us-cert.gov/cas/techalerts/TA12-073A.html · Note
• http://securityfocus.com/bid/52354 · Note
• http://securitytracker.com/id?1026790 · Note
• http://technet.microsoft.com/en-us/security/bulletin/MS12-020 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14626 · Note