Windows 7: Microsoft Urges Users To Patch Critical Remote Desktop Vulnerability

Hey folks, it's time to patch your Windows PCs! Somebody tipped Microsoft off to a vulnerability in the way Windows handles the remote desktop protocol, and the problem turned out to be a biggie: the exploit allows attackers to run code without any user permissions whatsoever, and all Windows operating systems from XP on up are affected. The good news is that Microsoft has already issued a security patch for the problem. The bad news? Microsoft has taken the unusual step of suggesting you install the patch immediately, since it expects baddies to exploit the gaping security hole quickly.

What is the reason for the urgency ?

Summary: The code publication has set off alarm bells in the corridors at Redmond because there are clear signs that Microsoft’s pre-patch vulnerability sharing program has been breached or has suffered a major leak.


The publication of the code on a Chinese language forum heightens the urgency to apply Microsoft’s MS12-020 update, which addresses a remote, pre-authentication, network-accessible code execution vulnerability in Microsoft’s implementation of the RDP protocol.

It also sets of alarm bells in the corridors at Redmond because there are clear signs that Microsoft’s pre-patch vulnerability sharing program has been breached or has suffered a major leak.