Vulnerability Details CVE-2012-2526
The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP3 does not properly process packets in memory, which allows remote attackers to execute arbitrary code by sending crafted RDP packets triggering access to a deleted object, aka "Remote Desktop Protocol Vulnerability."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.549
EPSS Ranking 97.9%
CVSS Severity
CVSS v2 Score 9.3
References
- http://www.us-cert.gov/cas/techalerts/TA12-227A.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-053
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15650
- http://www.us-cert.gov/cas/techalerts/TA12-227A.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-053
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15650
Products affected by CVE-2012-2526
-
cpe:2.3:o:microsoft:windows_xp:-
-
cpe:2.3:o:microsoft:windows_xp:unknown