漏洞描述 MS12-020(Microsoft Windows远程桌面协议RDP远程代码执行漏洞),可导致BSOD(死亡蓝屏)。远程桌面协议(RDP, RemoteDesktopProtocol)是一个多通道的协议,让用户连上提供微软终端机服务的电脑,Windows在处理某些对象时存在错误,可通过特制的RDP报文访问未初始化的或已经删除的对象,导致任意代码执行,然后控制系统。
相关漏洞推荐 Windows PolicyConfiguration 计划任务特权提升漏洞(CVE-2025-60710) Windows 11 PolicyConfiguration 计划任务特权提升漏洞(CVE-2025-60710) Windows NTLMv2-SSP Hash信息泄露漏洞(CVE-2025-50154) POC CVE-2015-1635: Microsoft Windows 'HTTP.sys' - Remote Code Execution POC CVE-2017-7269: Windows Server 2003 & IIS 6.0 - Remote Code Execution POC CVE-2024-38472: Apache HTTPd Windows UNC - Server-Side Request Forgery POC generic-windows-lfi: Generic Windows based LFI Test POC automatic-windows-updates-disabled: Automatic Windows Updates Disabled POC sticky-keys-enabled-login: Sticky Keys Enabled at Login Screen POC windows-active-desktop-enabled: Active Desktop Enabled POC windows-administrative-shares-enabled: Administrative Shares Enabled POC windows-administrator-blank-password: Built-in Administrator Account Has Blank Password POC windows-anonymous-sid-enumeration-allowed: Windows Allows Anonymous SID Enumeration