PT-2019-2758

CVE-2019-0887

Published

2019-07-09

Updated

2026-02-07

Description by

CVSS 2.0

9.0

High

MetricsAV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services (affected versions not specified)

Description A remote code execution issue exists in Remote Desktop Services due to insufficient input validation, allowing an attacker to execute arbitrary code. The vulnerability can be exploited by abusing clipboard redirection. It potentially allows control over the connected RDP client.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Eyal Itkin

Vendors

Affected products

Weakness enumeration

CWE-20: Improper Input Validation

CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')

Related identifiers