FNAL Critical Vulnerability: Vulnerabilities in Remote Desktop Could Allow Remote Code Execution (MS12-020) Patch By: June 26, 2012 Product: Vulnerabilities in Remote Desktop Could Allow Remote Code Execution (MS12-020) Platform: Windows XP, 2003, 2008, Vista, Windows 7 Host Remediation: Windows machines are to apply Microsoft patch MS12-020 (part of the June 2012 Microsoft patch bundle). Use a Desktop firewall (or IPSec filters) with a default deny policy, if possible. FNAL Site Actions: Force deadline for patch MS12-020 to be early morning June 26th through automated patching mechanisms. This is a continuation of the March FNAL Critical Vulnerabillity for Windows Remote Desktop. Microsoft re-released this patch to overcome an inadvertant rollback to a previously vulnerable version. Microsoft reference URL: http://technet.microsoft.com/en-us/security/bulletin/ms12-020 |
For
assistance contact servicedesk@fnal.gov.
Information compiled and maintained by Computer Security Team ; last modified on Nov 11, 2011. (Address comments about page to the Computer Security Team.) |