VULNERABILITY INTELLIGENCE

CVE-2012-2526

CVSS score9.3 HIGH
EPSS probability25.01%
CISA KEVNot currently listed
Published2012-08-15
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP3 does not properly process packets in memory, which allows remote attackers to execute arbitrary code by sending crafted RDP packets triggering access to a deleted object, aka "Remote Desktop Protocol Vulnerability."

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references