Vulnerability Name:

CVE-2012-0152 (CCN-73542)

Assigned:2011-12-13
Published:2012-03-13
Updated:2020-09-28
Summary:The Remote Desktop Protocol (RDP) service in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service (application hang) via a series of crafted packets, aka "Terminal Server Denial of Service Vulnerability."
CVSS v3 Severity:7.5 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
CVSS v2 Severity:4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P)
3.2 Low (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
7.8 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C)
5.8 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
Vulnerability Type:CWE-20
Vulnerability Consequences:Denial of Service
References:Source: MITRE
Type: CNA
CVE-2012-0152

Source: CCN
Type: SA48395
Microsoft Windows Remote Desktop Protocol Two Vulnerabilities

Source: CCN
Type: Microsoft Security Bulletin MS12-020
Vulnerabilities in Remote Desktop Could Allow Remote Code Execution (2671387)

Source: BID
Type: UNKNOWN
52354

Source: CCN
Type: BID-52354
Microsoft Remote Desktop Protocol Service CVE-2012-0152 Denial of Service Vulnerability

Source: SECTRACK
Type: UNKNOWN
1026790

Source: CERT
Type: US Government Resource
TA12-073A

Source: MS
Type: UNKNOWN
MS12-020

Source: XF
Type: UNKNOWN
ms-rdp-dos(73542)

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:14626

Vulnerable Configuration:Configuration 1:
  • cpe:/o:microsoft:windows_7:*:*:x64:*:*:*:*:*
  • OR cpe:/o:microsoft:windows_7:*:*:x86:*:*:*:*:*
  • OR cpe:/o:microsoft:windows_7:*:sp1:x64:*:*:*:*:*
  • OR cpe:/o:microsoft:windows_7:*:sp1:x86:*:*:*:*:*
  • OR cpe:/o:microsoft:windows_server_2008:r2:*:*:*:*:*:itanium:*
  • OR cpe:/o:microsoft:windows_server_2008:r2:*:*:*:*:*:x64:*

  • Configuration CCN 1:
  • cpe:/o:microsoft:windows_7:-:*:*:*:*:*:x32:*
  • OR cpe:/o:microsoft:windows_server_2008:r2:*:*:*:*:*:x64:*
  • OR cpe:/o:microsoft:windows_server_2008:r2:*:*:*:*:*:itanium:*
  • OR cpe:/o:microsoft:windows_7:-:sp1:*:*:ultimate_n:*:x64:*
  • OR cpe:/o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*
  • OR cpe:/o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*

  • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.mitre.oval:def:14626
    V
    Terminal Server Denial of Service Vulnerability
    2012-07-09
    BACK
    microsoft windows 7 *
    microsoft windows 7 *
    microsoft windows 7 * sp1
    microsoft windows 7 * sp1
    microsoft windows server 2008 r2
    microsoft windows server 2008 r2
    microsoft windows 7 -
    microsoft windows server 2008 - r2
    microsoft windows server 2008 r2
    microsoft windows 7 - sp1
    microsoft windows server 2008 r2 sp1
    microsoft windows server 2008 r2 sp1