Microsoft Denies Reports Of Exploits For Critical Windows Rdp Hole

Thursday, March 15, 2012
Microsoft Denies Reports of Exploits For Critical Windows RDP Hole

Microsoft said that it has not seen any evidence that hackers have figured out a way to take advantage of a critical vulnerability in the Windows Remote Desktop Protocol (RDP) that the company disclosed and patched on Tuesday. The statement comes in the wake of unconfirmed reports of working exploits for the RDP hole circulating online on Thursday.

Yunsun Wee, the director of Trustworthy Computing at the Redmond, Washington company said that Microsoft was recommending customers deploy the patch, MS12-020, as soon as possible to close a critical hole in the RDP protocol, a standard component used to allow remote access to Windows desktops. But the Director said that the company still hasn't seen any evidence that cyber criminals or others had figured out how to exploit the hole yet.

"We have not seen any evidence pointing to public exploit code or active attacks for the issue addressed by MS12-020," he said in an e-mail statement.

http://threatpost.com/en_us/blogs/microsoft-denies-reports-exploits-critical-windows-rdp-hole-031512