Skip to content
Fencer Intel
critical 9.3

CVE-2012-0002 in the critical feed json

The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows S…

published 2012-03-13 14 y ago modified 2026-06-16 4 mo ago also EUVD-2012-0043

cvss
9.3
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
75.0%
EPSS 75.0% chance of exploitation in 30 days, percentile 99.5%
public exploits
3
Metasploit, Exploit-DB

Summary

The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process packets in memory, which allows remote attackers to execute arbitrary code by sending crafted RDP packets triggering access to an object that (1) was not properly initialized or (2) is deleted, aka "Remote Desktop Protocol Vulnerability."

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-12-079-01 updated cvss 9.3

Microsoft Remote Desktop Protocol Memory Corruption Vulnerability

  • Microsoft Windows 7 for 32-bit Systems and Windows 7 for 32-bit Systems Service Pack 1\ (KB2621440) Microsoft Windows 7 for 32-bit Systems and Windows 7 for 32-bit Systems Service Pack 1\ (KB2667402) Microsoft Windows 7 for x64-based Systems and Windows 7 for x64-based Systems Service Pack 1\ (KB2621440) Microsoft Windows 7 for x64-based Systems and Windows 7 for x64-based Systems Service Pack 1\ (KB2667402) Microsoft Windows Server 2003 Service Pack 2 (KB2621440) Microsoft Windows Server 2003 with SP2 for Itanium-based Systems (KB2621440)
    +12 more products
    Microsoft Windows Server 2003 x64 Edition Service Pack 2 (KB2621440) Microsoft Windows Server 2008 for 32-bit Systems Service Pack 2* (KB2621440) Microsoft Windows Server 2008 for Itanium-based Systems Service Pack 2\ (KB2621440) Microsoft Windows Server 2008 for x64-based Systems Service Pack 2*\ (KB2621440) Microsoft Windows Server 2008 R2 for Itanium-based Systems and Windows Server 2008 R2 for Itanium-based Systems Service Pack 1\ (KB2621440) Microsoft Windows Server 2008 R2 for Itanium-based Systems and Windows Server 2008 R2 for Itanium-based Systems Service Pack 1\ (KB2667402) Microsoft Windows Server 2008 R2 for x64-based Systems and Windows Server 2008 R2 for x64-based Systems Service Pack 1*\ (KB2621440) Microsoft Windows Server 2008 R2 for x64-based Systems and Windows Server 2008 R2 for x64-based Systems Service Pack 1*\ (KB2667402) Microsoft Windows Vista Service Pack 2 (KB2621440) Microsoft Windows Vista x64 Edition Service Pack 2 (KB2621440) Microsoft Windows XP Professional x64 Edition Service Pack 2 (KB2621440) Microsoft Windows XP Service Pack 3 (KB2621440)
    affected: mitigation learn.microsoft.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

Timeline

  1. Published
  2. First public exploit (Metasploit auxiliary/dos/windows/rdp/ms12_020_maxchannelids)

Exploit prediction

74.99% chance of exploitation in the next 30 days, higher than 99.5% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

CVSS scores

assigned by version score vector
NVD 2.0 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C

Classification

Weakness
  • CWE-94 Improper Control of Generation of Code

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.