CVE-2019-0708— Microsoft Remote Desktop Services 资源管理错误漏洞
一分钟漏洞结论
影响对象
Microsoft Windows
利用判断
已确认在野利用，应立即处置
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
Microsoft Windows和Microsoft Windows Server都是美国微软（Microsoft）公司的产品。Microsoft Windows是一套个人设备使用的操作系统。Microsoft Windows Server是一套服务器操作系统。Remote Desktop Services是其中的一个远程桌面服务组件。 Microsoft Remote Desktop Services中存在资源管理错误漏洞。该漏洞源于网络系统或产品对系统资源（如内存、磁盘空间、文件等）的管理不当。以下
公开利用映射 6
已观察到在野利用
cisa_kev · confirmed
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2019-0708 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
来源: CVE Program / CVE List V5
Vulnerability Description
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.
来源: CVE Program / CVE List V5
CVSS Information
N/A
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5
Vulnerability Title
Microsoft Remote Desktop Services 资源管理错误漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Microsoft Windows和Microsoft Windows Server都是美国微软（Microsoft）公司的产品。Microsoft Windows是一套个人设备使用的操作系统。Microsoft Windows Server是一套服务器操作系统。Remote Desktop Services是其中的一个远程桌面服务组件。 Microsoft Remote Desktop Services中存在资源管理错误漏洞。该漏洞源于网络系统或产品对系统资源（如内存、磁盘空间、文件等）的管理不当。以下
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
| 厂商 | 产品 | 影响版本 | CPE | 订阅 |
|---|---|---|---|---|
| Microsoft | Windows | 7 for 32-bit Systems Service Pack 1 | - |
|
| Microsoft | Windows Server | 2008 R2 for x64-based Systems Service Pack 1 (Core installation) | - |
|
二、漏洞 CVE-2019-0708 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|---|---|---|
| 1 | proof of concept exploit for Microsoft Windows 7 and Server 2008 RDP vulnerability | https://github.com/hook-s3c/CVE-2019-0708-poc | POC详情 |
| 2 | A Win7 RDP exploit | https://github.com/SherlockSec/CVE-2019-0708 | POC详情 |
| 3 | CVE-2019-0708 | https://github.com/yetiddbb/CVE-2019-0708-PoC | POC详情 |
| 4 | CVE-2019-0708-exploit | https://github.com/p0p0p0/CVE-2019-0708-exploit | POC详情 |
| 5 | Using CVE-2019-0708 to Locally Promote Privileges in Windows 10 System | https://github.com/rockmelodies/CVE-2019-0708-Exploit | POC详情 |
| 6 | CVE-2019-0708 exp | https://github.com/anquanscan/CVE-2019-0708 | POC详情 |
| 7 | Dark Net Sunset New Release CVE-2019-0708 | https://github.com/xiyangzuishuai/Dark-Network-CVE-2019-0708 | POC详情 |
| 8 | CVE-2019-0708 | https://github.com/temp-user-2014/CVE-2019-0708 | POC详情 |
| 9 | Proof of concept exploit for CVE-2019-0708 | https://github.com/areusecure/CVE-2019-0708 | POC详情 |
| 10 | Testing my new bot out | https://github.com/pry0cc/cve-2019-0708-2 | POC详情 |
| 11 | POCexp:https://pan.baidu.com/s/184gN1tJVIOYqOjaezM_VsA 提取码:e2k8 | https://github.com/sbkcbig/CVE-2019-0708-EXPloit | POC详情 |
| 12 | EXPloit-poc: https://pan.baidu.com/s/184gN1tJVIOYqOjaezM_VsA 提取码:e2k8 | https://github.com/sbkcbig/CVE-2019-0708-EXPloit-3389 | POC详情 |
| 13 | CVE-2019-0708 | https://github.com/YSheldon/MS_T120 | POC详情 |
| 14 | 3389远程桌面代码执行漏洞CVE-2019-0708批量检测工具(Rdpscan Bluekeep Check) | https://github.com/k8gege/CVE-2019-0708 | POC详情 |
| 15 | exploit CVE-2019-0708 RDS | https://github.com/hotdog777714/RDS_CVE-2019-0708 | POC详情 |
| 16 | RDP POC | https://github.com/jiansiting/CVE-2019-0708 | POC详情 |
| 17 | PoC exploit for BlueKeep (CVE-2019-0708) | https://github.com/NullByteSuiteDevs/CVE-2019-0708 | POC详情 |
| 18 | sup pry0cc :3 | https://github.com/thugcrowd/CVE-2019-0708 | POC详情 |
| 19 | CVE-2019-0708 | https://github.com/blacksunwen/CVE-2019-0708 | POC详情 |
| 20 | None | https://github.com/infenet/CVE-2019-0708 | POC详情 |
| 21 | Totally legitimate | https://github.com/n0auth/CVE-2019-0708 | POC详情 |
| 22 | None | https://github.com/gildaaa/CVE-2019-0708 | POC详情 |
| 23 | CVE-2019-0708 EXPloit-poc 漏洞描述 微软官方紧急发布安全补丁，修复了一个Windows远程桌面服务的远程代码执行漏洞CVE-2019-0708，该漏洞影响了某些旧版本的Windows系统。此漏洞是预身份验证，无需用户交互。当未经身份验证的攻击者使用RDP（常见端口3389）连接到目标系统并发送特制请求时，可以在目标系统上执行任意命令。甚至传播恶意蠕虫，感染内网其他机器。类似于2017年爆发的WannaCry等恶意勒索软件病毒。 漏洞评级 CVE-2019-0708 严重 安全建议 1、针对Windows 7及Windows Server 2008的用户，及时安装官方安全补丁：https://www.catalog.update.microsoft.com/Search.aspx?q=KB4499175 2、针对Windows 2003及Windows XP的用户，及时更新系统版本或安装官方补丁：https://support.microsoft.com/zh-cn/help/4500705/customer-guidance-for-cve-2019-0708 CVE-2019-0708 EXPloit-poc 影响版本 Windows7 XP Windows 2003 Windows Server 2008 Windows Server 2008 R2 EXPloit-poc: https://pan.baidu.com/s/184gN1tJVIOYqOjaezM_VsA 提取码:e2k8 | https://github.com/sbkcbig/CVE-2019-0708-Poc-exploit | POC详情 |
| 24 | None | https://github.com/HackerJ0e/CVE-2019-0708 | POC详情 |
| 25 | PoC about CVE-2019-0708 (RDP; Windows 7, Windows Server 2003, Windows Server 2008) | https://github.com/syriusbughunt/CVE-2019-0708 | POC详情 |
| 26 | A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. An attacker who successfully exploited this vulnerability could execute arbitrary code on the target system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. | https://github.com/Barry-McCockiner/CVE-2019-0708 | POC详情 |
| 27 | A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. An attacker who successfully exploited this vulnerability could execute arbitrary code on the target system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. | https://github.com/ShadowBrokers-ExploitLeak/CVE-2019-0708 | POC详情 |
| 28 | CVE-2019-0708 demo | https://github.com/safly/CVE-2019-0708 | POC详情 |
| 29 | None | https://github.com/Jaky5155/cve-2019-0708-exp | POC详情 |
| 30 | Powershell script to run and determine if a specific device has been patched for CVE-2019-0708. This checks to see if the termdd.sys file has been updated appropriate and is at a version level at or greater than the versions released in the 5/14/19 patches. | https://github.com/fourtwizzy/CVE-2019-0708-Check-Device-Patch-Status | POC详情 |
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2019-0708 的情报信息
请登录查看更多情报信息。
CVE-2019-0708 厂商安全公告 (6)
-
https://cert-portal.siemens.com/productcert/pdf/ssa-433987.pdf x_refsource_CONFIRM
-
https://cert-portal.siemens.com/productcert/pdf/ssa-406175.pdf x_refsource_CONFIRM
-
https://cert-portal.siemens.com/productcert/pdf/ssa-832947.pdf x_refsource_CONFIRM
-
https://cert-portal.siemens.com/productcert/pdf/ssa-616199.pdf x_refsource_CONFIRM
-
https://cert-portal.siemens.com/productcert/pdf/ssa-166360.pdf x_refsource_CONFIRM
CVE-2019-0708 公开利用代码 (5)
CVE-2019-0708 其他参考 (2)
-
http://www.huawei.com/en/psirt/security-notices/huawei-sn-20190515-01-windows-en x_refsource_CONFIRM
同批安全公告 · Microsoft · 2019-05-16 · 共 79 条
| CVE-2019-0927 | Microsoft Edge和ChakraCore 缓冲区错误漏洞 | |
| CVE-2019-0929 | Microsoft Internet Explorer 缓冲区错误漏洞 | |
| CVE-2019-0893 | Microsoft Windows Jet Database Engine 缓冲区错误漏洞 | |
| CVE-2019-0931 | Microsoft Windows Storage Service 权限许可和访问控制问题漏洞 | |
| CVE-2019-0932 | Microsoft Skype for Android 信息泄露漏洞 | |
| CVE-2019-0930 | Microsoft Internet Explorer 信息泄露漏洞 | |
| CVE-2019-0926 | Microsoft Edge 缓冲区错误漏洞 | |
| CVE-2019-0925 | Microsoft Edge和ChakraCore 缓冲区错误漏洞 | |
| CVE-2019-0924 | Microsoft Edge和ChakraCore 缓冲区错误漏洞 | |
| CVE-2019-0923 | Microsoft Edge 缓冲区错误漏洞 | |
| CVE-2019-0872 | Microsoft Team Foundation Server和Microsoft Azure DevOps Server 跨站脚本漏洞 | |
| CVE-2019-0881 | Microsoft Windows Kernel 权限许可和访问控制问题漏洞 | |
| CVE-2019-0882 | Microsoft Windows Graphics Device Interface 信息泄露漏洞 | |
| CVE-2019-0884 | Microsoft Edge和Internet Explorer 缓冲区错误漏洞 | |
| CVE-2019-0885 | Microsoft Windows OLE 输入验证错误漏洞 | |
| CVE-2019-0886 | Microsoft Windows Hyper-V 输入验证错误漏洞 | |
| CVE-2019-0889 | Microsoft Windows Jet Database Engine 缓冲区错误漏洞 | |
| CVE-2019-0890 | Microsoft Windows Jet Database Engine 缓冲区错误漏洞 | |
| CVE-2019-0891 | Microsoft Windows Jet Database Engine 缓冲区错误漏洞 | |
| CVE-2019-0892 | Microsoft win32k 权限许可和访问控制问题漏洞 |
显示前 20 条，共 79 条。 查看全部 → →
IV. Related Vulnerabilities
V. Comments for CVE-2019-0708
匿名用户
2026-01-15 06:09:08Zaproxy alias impedit expedita quisquam pariatur exercitationem. Nemo rerum eveniet dolores rem quia dignissimos.