{"vulnerability": "cve-2019-0887", "sightings": [{"uuid": "4845641f-c999-41ae-bdd1-5607ef3f3c38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0887", "type": "seen", "source": "https://t.me/N0iSeBit/299", "content": "\u0412 \u044d\u0442\u043e\u0442 \u0432\u0442\u043e\u0440\u043d\u0438\u043a MS \u0437\u0430\u043f\u0430\u0442\u0447\u0438\u043b\u0430 \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043c\u043d\u043e\u0433\u043e RCE (Remote Code Execution) \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439:\n\nWindows DHCP Server (CVE-2019-0785)\nRemote Desktop Services (CVE-2019-0887)\nGDI+ (CVE-2019-1102)\nDirectWrite (CVE-2019-1117 - 1124, 1127, 1128)\n\n\u041d\u0435 \u0437\u0430\u0442\u044f\u0433\u0438\u0432\u0430\u0439\u0442\u0435 \u0441 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u043e\u0439 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \ud83d\udc80", "creation_timestamp": "2019-07-09T20:26:31.000000Z"}, {"uuid": "aa5b9426-ea8d-4dbd-87dd-819000ee4bb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0887", "type": "seen", "source": "https://t.me/information_security_channel/37846", "content": "Researchers discovered several critical vulnerabilities that let attackers reverse the usual direction of communication and infect the user\u2019s computer. The vulnerability was found with Microsoft\u2019s RDP client and it also applicable for guest-to-host VM escape in Hyper-V Manager. Microsoft released a patch for the Path-Traversal vulnerability (CVE-2019-0887) as part of its July 2019 Patch. The [\u2026]\nThe post Reverse RDP \u2013 Microsoft Patch for RDP client Opens Room for Other Attacks (https://gbhackers.com/reverse-rdp-attack/) appeared first on GBHackers On Security (https://gbhackers.com/).", "creation_timestamp": "2020-05-15T09:07:55.000000Z"}, {"uuid": "87611d9d-6423-4155-a9bf-188495d82220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0887", "type": "seen", "source": "https://t.me/SecLabNews/7584", "content": "\u0412\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0435 \u043f\u0440\u043e\u0448\u043b\u044b\u043c \u043b\u0435\u0442\u043e\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Microsoft \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u0432 RDP (CVE-2019-0887) \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u043e\u0447\u0435\u043d\u044c \u043b\u0435\u0433\u043a\u043e \u043e\u0431\u043e\u0439\u0442\u0438 \u2013 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0431\u044b\u043b\u043e \u0437\u0430\u043c\u0435\u043d\u0438\u0442\u044c \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0435 \u0441\u043b\u044d\u0448\u0438 \u043e\u0431\u044b\u0447\u043d\u044b\u043c\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2020-0655 \u0438 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 Microsoft \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u00ab\u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u00bb.    \nMicrosoft \u00ab\u043d\u0435\u0434\u043e\u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430\u00bb \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 RDP", "creation_timestamp": "2024-08-02T12:11:00.000000Z"}, {"uuid": "63273215-30ab-434c-933a-3dbf8de87936", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0887", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/1135", "content": "#AppSec\n1. Consequences of Incorrect Vulnerability Fixes RDP vulnerability (CVE-2019-0887):\nReverse RDP - The Path Not Taken...\nhttps://research.checkpoint.com/2020/reverse-rdp-the-path-not-taken/\n2. Security Flaws in Adobe Acrobat Reader Allow Malicious Program to Gain Root on macOS Silently\nhttps://rekken.github.io/2020/05/14/Security-Flaws-in-Adobe-Acrobat-Reader-Allow-Malicious-Program-to-Gain-Root-on-macOS-Silently", "creation_timestamp": "2024-10-24T04:22:05.000000Z"}]}