Vulnerability Details CVE-2019-0887
A remote code execution vulnerability exists in Remote Desktop Services - formerly known as Terminal Services - when an authenticated attacker abuses clipboard redirection, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.545
EPSS Ranking 97.9%
CVSS Severity
CVSS v3 Score 8.0
CVSS v2 Score 8.5
References
- http://www.securityfocus.com/bid/108964
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0887
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- https://research.checkpoint.com/reverse-rdp-the-hyper-v-connection/
- http://www.securityfocus.com/bid/108964
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0887
- https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
- https://research.checkpoint.com/reverse-rdp-the-hyper-v-connection/
Products affected by CVE-2019-0887
-
cpe:2.3:a:microsoft:remote_desktop:-
-
cpe:2.3:a:microsoft:remote_desktop:1.2.1026
-
cpe:2.3:a:microsoft:remote_desktop:1.2.1104
-
cpe:2.3:a:microsoft:remote_desktop:1.2.1186
-
cpe:2.3:a:microsoft:remote_desktop:1.2.1275
-
cpe:2.3:a:microsoft:remote_desktop:1.2.1364
-
cpe:2.3:a:microsoft:remote_desktop:1.2.1446
-
cpe:2.3:a:microsoft:remote_desktop:1.2.1525
-
cpe:2.3:a:microsoft:remote_desktop:1.2.1672
-
cpe:2.3:a:microsoft:remote_desktop:1.2.1755
-
cpe:2.3:a:microsoft:remote_desktop:1.2.1844
-
cpe:2.3:a:microsoft:remote_desktop:1.2.1954
-
cpe:2.3:a:microsoft:remote_desktop:1.2.2061
-
cpe:2.3:a:microsoft:remote_desktop:1.2.2130
-
cpe:2.3:a:microsoft:remote_desktop:1.2.2222
-
cpe:2.3:a:microsoft:remote_desktop:1.2.2223
-
cpe:2.3:a:microsoft:remote_desktop:1.2.2322
-
cpe:2.3:a:microsoft:remote_desktop:1.2.2459
-
cpe:2.3:a:microsoft:remote_desktop:1.2.247
-
cpe:2.3:a:microsoft:remote_desktop:1.2.2600
-
cpe:2.3:a:microsoft:remote_desktop:1.2.2606
-
cpe:2.3:a:microsoft:remote_desktop:1.2.2677
-
cpe:2.3:a:microsoft:remote_desktop:1.2.2687
-
cpe:2.3:a:microsoft:remote_desktop:1.2.2688
-
cpe:2.3:a:microsoft:remote_desktop:1.2.431
-
cpe:2.3:a:microsoft:remote_desktop:1.2.535
-
cpe:2.3:a:microsoft:remote_desktop:1.2.605
-
cpe:2.3:a:microsoft:remote_desktop:1.2.675
-
cpe:2.3:a:microsoft:remote_desktop:1.2.790
-
cpe:2.3:a:microsoft:remote_desktop:1.2.945
-
cpe:2.3:o:microsoft:windows_10:-
-
cpe:2.3:o:microsoft:windows_10:1607
-
cpe:2.3:o:microsoft:windows_10:1703
-
cpe:2.3:o:microsoft:windows_10:1709
-
cpe:2.3:o:microsoft:windows_10:1803
-
cpe:2.3:o:microsoft:windows_10:1809
-
cpe:2.3:o:microsoft:windows_10:1903
-
cpe:2.3:o:microsoft:windows_11_21h2:10.0.22000.376
-
cpe:2.3:o:microsoft:windows_7:-
-
cpe:2.3:o:microsoft:windows_8.1:-
-
cpe:2.3:o:microsoft:windows_rt_8.1:-
-
cpe:2.3:o:microsoft:windows_server_2008:-
-
cpe:2.3:o:microsoft:windows_server_2008:r2
-
cpe:2.3:o:microsoft:windows_server_2012:-
-
cpe:2.3:o:microsoft:windows_server_2012:r2
-
cpe:2.3:o:microsoft:windows_server_2016:-
-
cpe:2.3:o:microsoft:windows_server_2016:1803
-
cpe:2.3:o:microsoft:windows_server_2016:1903
-
cpe:2.3:o:microsoft:windows_server_2019:-