PT-2015-4453 · Microsoft · Windows 8.1+4

Published 2015-03-11 · Updated 2019-05-14 · CVE-2015-0079

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows 7 SP1 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold Microsoft Windows Server 2012 R2

Description The issue allows remote attackers to cause a denial of service, resulting in memory consumption and RDP outage, by establishing many RDP sessions that do not properly free allocated memory.

Recommendations For Microsoft Windows 7 SP1, update to a version that includes the fix for this issue. For Microsoft Windows 8, update to a version that includes the fix for this issue. For Microsoft Windows 8.1, update to a version that includes the fix for this issue. For Microsoft Windows Server 2012 Gold, update to a version that includes the fix for this issue. For Microsoft Windows Server 2012 R2, update to a version that includes the fix for this issue.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2015-0079

Affected Products

Windows 7 Sp1

Windows 8

Windows 8.1

Windows Server 2012

Windows Server 2012 R2

References · 3

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-030 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-0079 · Security Note
• http://securitytracker.com/id/1031892 · Note