As you may already be aware, Microsoft has just released an important
"critical update" that fixes a vulnerability in the Remote Desktop
component of their Windows server editions.
This vulnerability allows an attacker to execute arbitrary code (read:
gain full access) on any unpatched Windows edition that has the Remote
Desktop service enabled, and affects all Windows versions (2003, 2008, etc.)
Besides making sure all your existing Windows installations are updated,
apply the following patch manually.
Microsoft Security Bulletin MS12-020 - Critical : Vulnerabilities in Remote Desktop Could Allow Remote Code Execution (2671387)
"critical update" that fixes a vulnerability in the Remote Desktop
component of their Windows server editions.
This vulnerability allows an attacker to execute arbitrary code (read:
gain full access) on any unpatched Windows edition that has the Remote
Desktop service enabled, and affects all Windows versions (2003, 2008, etc.)
Besides making sure all your existing Windows installations are updated,
apply the following patch manually.
Microsoft Security Bulletin MS12-020 - Critical : Vulnerabilities in Remote Desktop Could Allow Remote Code Execution (2671387)