Microsoft Remote Desktop Client for Mac Remote Code Execution Vulnerability

Last Update Date: 9 Dec 2016 09:12 Release Date: 9 Dec 2016 3298 Views

RISK: Extremely High Risk

TYPE: Clients - Productivity Products

A vulnerability was identified in Microsoft Remote Desktop Client for Mac. A remote user can cause arbitrary code to be executed on the target user's system.

Note:

A demonstration exploit video is available at:
- https://youtu.be/6HeSiXYRpNY
No official solution is currently available

Impact

Remote Code Execution

System / Technologies affected

Version 8.0.36; possibly other versions

Solutions

No official solution is currently available.
Workaround:
- Remove Microsoft Remote Desktop Client for Mac until patched

Vulnerability Identifier

No CVE information is available

Source

SecurityTracker