VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 9, 2013· Updated Jun 16, 2026

CVE-2013-1296

CVE-2013-1296

Description

The Remote Desktop ActiveX control in mstscax.dll in Microsoft Remote Desktop Connection Client 6.1 and 7.0 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code via a web page that triggers access to a deleted object, and allows remote RDP servers to execute arbitrary code via unspecified vectors that trigger access to a deleted object, aka "RDP ActiveX Control Remote Code Execution Vulnerability."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Microsoft/Remote Desktop Connection3 versions
    cpe:2.3:a:microsoft:remote_desktop_connection:6.1:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:microsoft:remote_desktop_connection:6.1:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:remote_desktop_connection:7.0:*:*:*:*:*:*:*
    • (no CPE)range: 6.1, 7.0

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.