CVE-2015-0079
high
CVSS v3
—
CVSS v2
7.8
VIR risk
7.8
Description
The Remote Desktop Protocol (RDP) implementation in Microsoft Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to cause a denial of service (memory consumption and RDP outage) by establishing many RDP sessions that do not properly free allocated memory, aka "Remote Desktop Protocol (RDP) Denial of Service Vulnerability."
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: secure@microsoft.com — https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-030
OS impact
| OS | Version | Status | Fixed in |
|---|---|---|---|
| windows | - | affected | |
| windows | r2 | affected | |
References
CWEs
CWE-399
Verify integrity in audit chain (admin only). AS-IS.