• info
• discussion
• exploit
• solution
• references

Microsoft Remote Desktop Connection ActiveX Control Heap Based Buffer Overflow Vulnerability

Solution:
The vendor has released an advisory and updates. Please see the references for details.


Microsoft RDP 6.1

• Microsoft Security Update for Windows Server 2008 (KB956744)
  http://www.microsoft.com/downloads/details.aspx?familyid=71c17a87-710b -434d-9b2a-2f471674915a


• Microsoft Security Update for Windows Server 2008 for Itanium-based Systems (KB956744)
  http://www.microsoft.com/downloads/details.aspx?familyid=65d0af4e-22a2 -4524-a003-2f4858012fa8


• Microsoft Security Update for Windows Server 2008 x64 Edition (KB956744)
  http://www.microsoft.com/downloads/details.aspx?familyid=f095d2d5-4513 -4ae1-96c7-cbcf83304261


• Microsoft Security Update for Windows Vista (KB956744)
  http://www.microsoft.com/downloads/details.aspx?familyid=cf95a552-f6fd -4e35-815a-d16c015cd3ea


• Microsoft Security Update for Windows Vista for x64-based Systems (KB956744)
  http://www.microsoft.com/downloads/details.aspx?familyid=5e19cef7-2413 -4575-9597-c6273a097aad


• Microsoft Security Update for Windows XP (KB956744)
  http://www.microsoft.com/downloads/details.aspx?familyid=d1f82d76-eeb2 -4ff4-9d2c-46882f214719


• Microsoft Security Update for Windows XP x64 Edition (KB956744)
  http://www.microsoft.com/downloads/details.aspx?familyid=5061615f-fa8f -465f-ac8f-393998b7e91b