Check Point Advisories

Preemptive Protection against Microsoft Terminal Server Denial of Service (MS12-020; CVE-2012-0152)

Check Point Reference:	CPAI-2012-099
Date Published:	13 Mar 2012
Severity:	Critical
Last Updated:	Sunday 01 January, 2012
Source:	CVE-2012-0152
Protection Provided by:
Who is Vulnerable?	Windows 7 for 32-bit Systems Windows 7 for 32-bit Systems Service Pack 1 Windows 7 for x64-based Systems Windows 7 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for Itanium-based Systems Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
Vulnerability Description	A denial of service vulnerability has been reported in Microsoft Remote Desktop Protocol.
Update/Patch Avaliable	Apply patches from: MS12-020
Vulnerability Details	The vulnerability is caused when the affected service processes a sequence of specially crafted packets. A remote attacker may exploit this issue by sending a sequence of specially crafted packets to the target. Successful exploitation could cause the service to crash, resulting in a denial of service condition.