U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database

Vulnerability Change Records for CVE-2019-1223

Change History

CVE Modified by Microsoft Corporation 5/29/2024 1:16:14 PM

Action Type Old Value New Value
Changed Description 
A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability'.
 
A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could cause the RDP service on the target system to stop responding.
To exploit this vulnerability, an attacker would need to run a specially crafted application against a server which provides Remote Desktop Protocol (RDP) services.
The update addresses the vulnerability by correcting how RDP handles connection requests.
Added CVSS V3.1 

								
							
							
								
							
						
								
							
								
Microsoft Corporation AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

								
								
					

					

						Removed
						CVSS V3
						
							
							
								
							
								
NIST AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H