7.5
High
CVE-2020-16863 A denial of service vulnerability exists in Windows Remote Desktop Service when an attacker connects to the target…
Description
<p>A denial of service vulnerability exists in Windows Remote Desktop Service when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could cause the Remote Desktop Service on the target system to stop responding.</p> <p>To exploit this vulnerability, an attacker would need to run a specially crafted application against a server which provides Remote Desktop Service.</p> <p>The update addresses the vulnerability by correcting how Remote Desktop Service handles connection requests.</p>
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows 7 6.1 | 6.1.0 → latest | No fix stated |
| Windows 7 Service Pack 1 6.1 | 6.1.0 → latest | No fix stated |
| Windows Server 2008 R2 Service Pack 1 6.1 | 6.1.0 → latest | No fix stated |
| Windows Server 2008 R2 Service Pack 1 (Server Core installation) 6.0 | 6.0.0 → latest | No fix stated |
References
- portal.msrc.microsoft.com portal.msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Windows 7
The 947 CVEs of Windows 7 →
CVE-2022-35759
Windows Local Security Authority (LSA) Denial of Service Vulnerability
6.5
Medium
CVE-2022-35758
Windows Kernel Memory Information Disclosure Vulnerability
5.5
Medium
CVE-2022-35756
Windows Kerberos Elevation of Privilege Vulnerability
7.8
High
CVE-2022-35752
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
8.1
High