漏洞标题
远程桌面服务远程代码执行漏洞
漏洞描述信息
在远程桌面服务(rdp)中,存在一种远程代码执行漏洞,当未授权的攻击者使用rdp连接到目标系统并发送特别 crafted 请求时,即被称为“远程桌面服务远程代码执行漏洞”。此CVE ID与CVE-2019-1181、CVE-2019-1182和CVE-2019-1226不同。
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
漏洞类别
N/A
漏洞标题
Remote Desktop Services Remote Code Execution Vulnerability
漏洞描述信息
A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. An attacker who successfully exploited this vulnerability could execute arbitrary code on the target system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
To exploit this vulnerability, an attacker would need to send a specially crafted request to the target systems Remote Desktop Service via RDP.
The update addresses the vulnerability by correcting how Remote Desktop Services handles connection requests.
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
漏洞类别
N/A
漏洞标题
Microsoft Windows Remote Desktop Services 访问控制错误漏洞
漏洞描述信息
Microsoft Windows和Microsoft Windows Server都是美国微软(Microsoft)公司的产品。Microsoft Windows是一套个人设备使用的操作系统。Microsoft Windows Server是一套服务器操作系统。Remote Desktop Services是其中的一个远程桌面服务组件。 Microsoft Windows中的Remote Desktop Services存在远程代码执行漏洞。攻击者可通过RDP向目标系统远程桌面服务发送特制的请求利用该漏
CVSS信息
N/A
漏洞类别
授权问题