CVE-2015-0079

High

Published: 11/03/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

The RDP implementation in Microsoft Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to cause a denial of service by establishing many RDP sessions that do not properly free allocated memory.

Risk Assessment

Attackers can exploit this vulnerability to exhaust memory resources, leading to RDP service outages and impacting system availability within the organization.

Recommendation

It is recommended to update systems to the latest versions that include security patches addressing this vulnerability and to monitor RDP sessions for unusual activity patterns.

Other vulnerabilities in Microsoft Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold, Windows Server 2012 R2

CVE-2016-0018High
The vulnerability in Microsoft Windows 7 SP1, 8, 8.1, Windows Server 2012 R2, and Windows 10 Gold and 1511 is related to improper DLL loading. This allows local users to gain elevated privileges via a crafted application.

Original NVD description (English source)

The Remote Desktop Protocol (RDP) implementation in Microsoft Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to cause a denial of service (memory consumption and RDP outage) by establishing many RDP sessions that do not properly free allocated memory, aka "Remote Desktop Protocol (RDP) Denial of Service Vulnerability."