Home    |    View Topics    |    Search    |    Contact Us    |   



Category:   OS (Microsoft)  >   Windows Remote Desktop Protocol (RDP) Vendors:   Microsoft
Microsoft Windows Remote Desktop Protocol Bug Lets Remote Users Deny Service
SecurityTracker Alert ID:  1014498
SecurityTracker URL:
CVE Reference:   CVE-2005-1218   (Links to External Site)
Updated:  Aug 9 2005
Original Entry Date:  Jul 16 2005
Impact:   Denial of service via network
Fix Available:  Yes  Vendor Confirmed:  Yes  
Version(s): XP SP2, 2000 SP4, 2003 SP1; and prior service packs
Description:   A vulnerability was reported in Microsoft Windows in the Remote Desktop Protocol (RDP) implementation. A remote user can cause denial of service conditions.

A remote user can send specially crafted RDP packet to cause the target system to hang or crash.

Systems with RDP enabled (not the default except on Windows XP Media Center Edition) are affected.

The vendor credits Tom Ferris of Security Protocols with reporting this vulnerability.

Impact:   A remote user can cause denial of service conditions on the target system.
Solution:   The vendor has issued the following fixes:

Microsoft Windows 2000 Server Service Pack 4:

Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2:

Microsoft Windows XP Professional x64 Edition:

Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1:

Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems:

Microsoft Windows Server 2003 x64 Edition:

A restart is required.

Vendor URL: (Links to External Site)
Cause:   Input validation error

Message History:   None.

 Source Message Contents

[Original Message Not Available for Viewing]

Go to the Top of This SecurityTracker Archive Page

Home   |    View Topics   |    Search   |    Contact Us

This web site uses cookies for web analytics. Learn More

Copyright 2021, LLC