Untrusted Search Path Vulnerability in Microsoft Remote Desktop Connection
CVE-2011-0029
Currently unrated
Key Information:
- Vendor
Microsoft
- Vendor
- CVE Published:
- 9 March 2011
What is CVE-2011-0029?
The vulnerability affects various versions of Microsoft Remote Desktop Connection, allowing local users to exploit an untrusted search path. By placing a malicious DLL in the working directory, specifically alongside a .rdp file, an unauthorized user can execute the DLL with elevated privileges. This risk illustrates the importance of secure coding practices and validating executable paths to mitigate the threat posed by Trojan horses.