Untrusted search path vulnerability in the client in Microsoft Remote Desktop Connection 5.2, 6.0, 6.1, and 7.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .rdp file, aka "Remote Desktop Insecure Library Loading Vulnerability."
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Thu, 17 Oct 2024 21:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.4, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: microsoft

Published:

Updated: 2024-10-17T20:13:22.986Z

Reserved: 2010-12-10T00:00:00

Link: CVE-2011-0029

cve-icon Vulnrichment

Updated: 2024-08-06T21:43:14.191Z

cve-icon NVD

Status : Deferred

Published: 2011-03-09T23:00:01.793

Modified: 2025-04-11T00:51:21.963

Link: CVE-2011-0029

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.