Untrusted Search Path Vulnerability in Microsoft Remote Desktop Connection

CVE-2011-0029

Summary

The vulnerability affects various versions of Microsoft Remote Desktop Connection, allowing local users to exploit an untrusted search path. By placing a malicious DLL in the working directory, specifically alongside a .rdp file, an unauthorized user can execute the DLL with elevated privileges. This risk illustrates the importance of secure coding practices and validating executable paths to mitigate the threat posed by Trojan horses.

References