Signature Detail

APP: Microsoft Remote Desktop Protocol Memory Object Reference Remote Code Execution

This signature detects attempts to exploit a known vulnerability against Remote Desktop Protocol. A successful attack can lead to arbitrary code execution.

Extended Description

Microsoft Remote Desktop Protocol is prone to a remote code-execution vulnerability. Successful exploits will allow the attacker to execute arbitrary code in the context of the affected process. This may facilitate a complete system compromise. Failed attacks may cause denial-of-service conditions.

Affected Products

• Microsoft windows_xp_embedded SP1
• Microsoft windows_xp_embedded SP2
• Microsoft windows_xp_embedded SP3
• Microsoft windows_xp_embedded
• Microsoft windows_xp_home SP1
• Microsoft windows_xp_home SP2
• Microsoft windows_xp_home SP3
• Microsoft windows_xp_home
• Microsoft windows_xp_media_center_edition SP1
• Microsoft windows_xp_media_center_edition SP2
• Microsoft windows_xp_media_center_edition SP3
• Microsoft windows_xp_professional SP1
• Microsoft windows_xp_professional SP2
• Microsoft windows_xp_professional SP3
• Microsoft windows_xp_professional
• Microsoft windows_xp_service_pack_3

References

• BugTraq: 54935
• CVE: CVE-2012-2526