Microsoft Remote Desktop Client Heap-Based Buffer Overflow Vulnerability Allowing Remote Code Execution

A heap-based buffer overflow vulnerability has been identified in the Remote Desktop Client. This vulnerability allows an unauthorized attacker to execute code remotely over a network. The issue arises when a victim connects to a compromised Remote Desktop Server using the vulnerable client.

Impact

Exploitation of this vulnerability could lead to remote code execution on the affected system.

Reproduction

To reproduce this vulnerability, an attacker must control a Remote Desktop Server and exploit the buffer overflow when a victim connects to the server using the vulnerable Remote Desktop Client.

Remediation

Users can download the security update for the Remote Desktop Client for Windows Desktop from the Microsoft Update Catalog. Security updates for various Windows versions and editions are also available through the Microsoft Update Catalog.