A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. An attacker who successfully exploited this vulnerability could execute arbitrary code on the target system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
To exploit this vulnerability, an attacker would need to send a specially crafted request to the target systems Remote Desktop Service via RDP.
The update addresses the vulnerability by correcting how Remote Desktop Services handles connection requests.
To exploit this vulnerability, an attacker would need to send a specially crafted request to the target systems Remote Desktop Service via RDP.
The update addresses the vulnerability by correcting how Remote Desktop Services handles connection requests.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: microsoft
Published:
Updated: 2024-08-04T18:13:29.557Z
Reserved: 2018-11-26T00:00:00
Link: CVE-2019-1226

Updated: 2024-08-04T18:13:29.557Z

Status : Modified
Published: 2019-08-14T21:15:18.877
Modified: 2024-11-21T04:36:17.010
Link: CVE-2019-1226

No data.

No data.