CVE-2011-0029

HIGH 7.4CVE-2011-0029 · Published 09/03/2011 · updated 16/06/2026

In short

CVE-2011-0029 is a HIGH (CVSS 7.4) vulnerability affecting remote desktop connection client (microsoft).
Chance of exploitation in the next 30 days (EPSS): 7.2%, higher than 94.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
remote desktop connection client microsoft	`= 5.2= 6.0= 6.1= 7.0`	No fix yet

Description

Untrusted search path vulnerability in the client in Microsoft Remote Desktop Connection 5.2, 6.0, 6.1, and 7.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .rdp file, aka "Remote Desktop Insecure Library Loading Vulnerability."

References

osvdb.org/71014
secunia.com/advisories/43628
securitytracker.com/id
us-cert.gov/cas/techalerts/TA11-067A.html · US Government Resource
vupen.com/english/advisories/2011/0616
docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-017
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12480

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free