CVE-2011-0029: Critical severity remote desktop connection vulnerability
Untrusted search path vulnerability in the client in Microsoft Remote Desktop Connection 5.2, 6.0, 6.1, and 7.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .rdp file, aka "Remote Desktop Insecure Library Loading Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-0029?
CVE-2011-0029 has been classified as a medium severity vulnerability.
How do I fix CVE-2011-0029?
To mitigate CVE-2011-0029, ensure you are using a patched version of Microsoft Remote Desktop Connection.
Who is affected by CVE-2011-0029?
Users of Microsoft Remote Desktop Connection versions 5.2, 6.0, 6.1, and 7.0 on various Windows operating systems are affected by CVE-2011-0029.
What type of vulnerability is CVE-2011-0029?
CVE-2011-0029 is categorized as an untrusted search path vulnerability.
Can CVE-2011-0029 lead to privilege escalation?
Yes, CVE-2011-0029 can allow local users to gain elevated privileges through the exploitation of the vulnerability.