CVE-2019-0708

CVE-2019-0708

描述

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.

影响版本

Product	CPU Architecture	Version	Update	Tested
Windows 7	x86/x64		SP1
Windows Server 2008	x86/x64	R2	SP1
Windows Server 2008	x86/x64		SP2

修复补丁

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0708

利用方式

该漏洞并未进行测试，根目录留存着网络收集**[CVE编号].zip**的EXP或者POC，代码状态未知

项目来源

分析文章

• https://xz.aliyun.com/t/5243
• https://bbs.pediy.com/thread-256734.htm
• https://www.anquanke.com/post/id/178964
• https://www.cnblogs.com/backlion/p/11482322.html