CVE-2011-0029

Published Mar 9, 2011 CVSS 3.1 · 7.4 High EPSS 7.2% KEV · Not listed
Description
Untrusted search path vulnerability in the client in Microsoft Remote Desktop Connection 5.2, 6.0, 6.1, and 7.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .rdp file, aka "Remote Desktop Insecure Library Loading Vulnerability."

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.4, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
microsoft
Published
Updated
Oct 17, 2024, 8:13 PM
Reserved
Dec 10, 2010, 12:00 AM
Status
Modified
Published
Mar 9, 2011, 11:00 PM
Modified
Jun 16, 2026, 11:26 PM