If you do not have any version of RDP installed, you need only install update 3067904 to be fully protected from the vulnerabilities described in this bulletin.The update you need to install depends on which version of RDP you have installed on your computer: Why am I not being offered both updates listed in the Affected Software table for Windows 7? For a comprehensive list of updates replaced, go to the Microsoft Update Catalog, search for the update KB number, and then view update details (updates replaced information is on the Package Details tab). *The Updates Replaced column shows only the latest update in a chain of superseded updates. () (Server Core installation)Ĭustomers running RDP 8.0 on supported editions of Windows 7 need only install update 3069762.
To determine the support life cycle for your software version or edition, see Microsoft Support Lifecycle. Versions or editions that are not listed are either past their support life cycle or are not affected. The following software versions or editions are affected. For more information about the vulnerability, see the Vulnerability Information section.įor more information about this update, see Microsoft Knowledge Base Article 3073094. The security update addresses the vulnerability by modifying how the terminal service handles packets. For more information, see the Affected Software section. This security update is rated Critical for affected editions of Windows 7, Windows 8, and Windows Server 2012.
Systems that do not have the RDP server service enabled are not at risk. By default, the RDP server service is not enabled on any Windows operating system. The vulnerability could allow remote code execution if an attacker sends a specially crafted sequence of packets to a targeted system with the Remote Desktop Protocol (RDP) server service enabled. This security update resolves a vulnerability in Microsoft Windows.
In this article Vulnerability in RDP Could Allow Remote Code Execution (3073094)
0 kommentar(er)
