PT-2019-2758 · Microsoft · Windows Remote Desktop Services+1

Eyal Itkin · Published 2019-07-09 · Updated 2026-02-07 · CVE-2019-0887

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services (affected versions not specified)

Description A remote code execution issue exists in Remote Desktop Services due to insufficient input validation, allowing an attacker to execute arbitrary code. The vulnerability can be exploited by abusing clipboard redirection. It potentially allows control over the connected RDP client.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Path traversal

Weakness Enumeration

CWE-20

CWE-22

Related Identifiers

BDU:2019-02695

CVE-2019-0887

Affected Products

Windows

Windows Remote Desktop Services

References · 16

• 🔥 https://github.com/t43Wiu6/CVE-2019-0887 · Exploit
• 🔥 https://github.com/qianshuidewajueji/CVE-2019-0887 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0887 · Security Note
• https://osv.dev/vulnerability/CVE-2019-0887 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2019-0887 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-02695 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0887 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-0887 · Security Note
• https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients · Note
• https://t.me/cybersecuritytechnologies/1135 · Telegram Post
• https://research.checkpoint.com/reverse-rdp-the-hyper-v-connection · Note
• https://t.me/defcon_news/21180 · Telegram Post
• https://t.me/secharvester/7100 · Telegram Post
• https://t.me/sysadm_in_channel/1799 · Telegram Post
• https://t.me/rnetsec/10146 · Telegram Post