Skip to content
OpenAdvisories
Unscored CVE-2015-2473 EUVD-2015-2566GHSA-p9g2-7xrp-3pjg

Untrusted search path vulnerability in the client in Remote Desktop Protocol (RDP) through 8.1 in Microsoft Windows 7 SP1 and Windows Serve…

Published Aug 15, 2015 · Updated Aug 6, 2024 · Assigned by microsoft

Description

Untrusted search path vulnerability in the client in Remote Desktop Protocol (RDP) through 8.1 in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .rdp file, aka "Remote Desktop Protocol DLL Planting Remote Code Execution Vulnerability."

References