Denial-of-Service Vulnerability in Microsoft Windows XP Remote Desktop
CVE-2002-0864

Currently unrated

Key Information:

Vendor

Microsoft

Vendor
CVE Published:
11 October 2002

What is CVE-2002-0864?

A flaw in the Remote Data Protocol (RDP) version 5.1 associated with Microsoft Windows XP allows attackers to exploit the system when Remote Desktop is activated. This occurs through a malformed PDU Confirm Active data packet that fails to set the Pattern BLT command, which can lead to a crash of the Remote Desktop service, effectively rendering the system unresponsive to legitimate connections. Organizations utilizing Windows XP with Remote Desktop enabled should ensure they are aware of this vulnerability to mitigate potential service interruptions.

References

EPSS Score

20% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.