(MS15-067) Vulnerability in RDP Could Allow Remote Code Execution (3073094)

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

  Severity: CRITICAL

  CVE Identifier: CVE-2015-2373

  Advisory Date: AUG 14, 2015

---

  DESCRIPTION

This security update resolves several vulnerabilities in certain Windows operating systems that have Remote Desktop Protocol (RDP) enabled. The vulnerability, when exploited successfully, could allow remote attackers to execute code on the vulnerable system.

  SOLUTION

  PATCH: https://technet.microsoft.com/en-us/library/security/MS15-067

  AFFECTED SOFTWARE AND VERSION

• Windows 7
• Windows 8
• Windows Server 2012
• Windows Server 2012 (Server Core installation)

Related Blog Entries

• “Gifts” From Hacking Team Continue, IE Zero-Day Added to Mix

Related Vulnerability

• July 2015 – Microsoft Releases 14 Security Advisories