FNAL Critical Vulnerability - Vulnerability in RDP (MS12-020)

FNAL Critical Vulnerability: Vulnerabilities in Remote Desktop Could Allow Remote Code Execution (MS12-020)
Patch By: June 26, 2012

Product: Vulnerabilities in Remote Desktop Could Allow Remote Code Execution (MS12-020)
Platform: Windows XP, 2003, 2008, Vista, Windows 7
Host Remediation: Windows machines are to apply Microsoft patch MS12-020 (part of the June 2012 Microsoft patch bundle). Use a Desktop firewall (or IPSec filters) with a default deny policy, if possible.
FNAL Site Actions: Force deadline for patch MS12-020 to be early morning June 26th through automated patching mechanisms.

This is a continuation of the March FNAL Critical Vulnerabillity for Windows Remote Desktop. Microsoft re-released this patch to overcome an inadvertant rollback to a previously vulnerable version.

Microsoft reference URL: http://technet.microsoft.com/en-us/security/bulletin/ms12-020

For assistance contact servicedesk@fnal.gov.
Information compiled and maintained by Computer Security Team ; last modified on Nov 11, 2011.
(Address comments about page to the Computer Security Team.)