Every CVE Search/ Get API key

CVE-2012-0002

The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows...

9.3 HighPublic exploit

CVE-2012-0002 is a high vulnerability (CVSS 9.3) in Microsoft Windows 7, published March 13, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 75.0%, the 99th percentile. No source names a fixed version.

The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process packets in memory, which allows remote attackers to execute arbitrary code by sending crafted RDP packets triggering access to an object that (1) was not properly initialized or (2) is deleted, aka "Remote Desktop Protocol Vulnerability."

Exploit likelihood

75.0%Down 17.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 9.3

The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process packets in memory, which allows remote attackers to execute arbitrary code by sending crafted RDP packets triggering access to an object that (1) was not properly initialized or (2) is deleted, aka "Remote Desktop Protocol Vulnerability."

Record
CVE-2012-0002
CVSS 2.0
9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-94
Updated
2026-11-02
CVE List No score

The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process packets in memory, which allows remote attackers to execute arbitrary code by sending crafted RDP packets triggering access to an object that (1) was not properly initialized or (2) is deleted, aka "Remote Desktop Protocol Vulnerability."

Record
CVE-2012-0002
Updated
2026-11-02
EUVDEUVD-2012-0043 No score

The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process packets in memory, which allows remote attackers to execute arbitrary code by sending crafted RDP packets triggering access to an object that (1) was not properly initialized or (2) is deleted, aka "Remote Desktop Protocol Vulnerability."

Record
EUVD-2012-0043
Updated
2026-11-03
GitHub AdvisoriesGHSA-5rh5-ff3w-38rh No score

The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows...

The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process packets in memory, which allows remote attackers to execute arbitrary code by sending crafted RDP packets triggering access to an object that (1) was not properly initialized or (2) is deleted, aka "Remote Desktop Protocol Vulnerability."

Record
GHSA-5rh5-ff3w-38rh
Weakness
CWE-94
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBMicrosoft Terminal Services - Use-After-Free (MS12-020)2012-03-16
MetasploitMS12-020 Microsoft Remote Desktop Use-After-Free DoS2012-03-16
MetasploitMS12-020 Microsoft Remote Desktop Checker
PoC in GitHubengineer-lucasmcmelo/CVE-2012-00022026-10-31
PoC in GitHubzhangkaibin0921/MS12-020-CVE-2012-00022023-11-30

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, PoC in GitHub

References

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open