Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Remote Desktop ActiveX control in mstscax.dll in Microsoft Remote Desktop Connection Client 6.1 and 7.0 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code via a web page that triggers access to a deleted object, and allows remote RDP servers to execute arbitrary code via unspecified vectors that trigger access to a deleted object, aka "RDP ActiveX Control Remote Code Execution Vulnerability."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft RDP ActiveX 控件远程执行代码漏洞
Vulnerability Description
Microsoft Remote Desktop Connection Client是美国微软（Microsoft）公司的一套远程桌面客户端软件。 当远程桌面ActiveX控件mstscax.dll尝试访问内存中已被删除的对象时，存在一个远程执行代码漏洞。攻击者可通过诱使用户访问特制网页来利用该漏洞。成功利用此漏洞的攻击者可以获得与登录用户相同的用户权限。以下版本存在漏洞：Microsoft Remote Desktop Connection Client 6.1和7.0版本。
CVSS Information
N/A
Vulnerability Type
N/A