Home / bulletins

MS12-036 - Critical : Vulnerability in Remote Desktop Could Allow Remote Code Execution (2685939) - Version: 1.3

Posted on 09 July 2013

Critical

Severity Rating: Critical
Revision Note: V1.3 (July 9, 2013): Bulletin revised to announce a detection change in the Windows Vista packages for the 2685939 update to correct a Windows Update reoffering issue. This is a detection change only. Customers who have already successfully updated their systems do not need to take any action.
Summary: This security update resolves a privately reported vulnerability in the Remote Desktop Protocol. The vulnerability could allow remote code execution if an attacker sends a sequence of specially crafted RDP packets to an affected system. By default, the Remote Desktop Protocol (RDP) is not enabled on any Windows operating system. Systems that do not have RDP enabled are not at risk.

Link

Other versions

• MS12-036 - Version: 1.0
• MS12-036 - Version: 1.1
• MS12-036 - Version: 1.2
• MS12-036 - Version: 1.3

 

TOP