VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 9, 2013· Updated Apr 29, 2026

CVE-2013-1296

CVE-2013-1296

Description

The Remote Desktop ActiveX control in mstscax.dll in Microsoft Remote Desktop Connection Client 6.1 and 7.0 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code via a web page that triggers access to a deleted object, and allows remote RDP servers to execute arbitrary code via unspecified vectors that trigger access to a deleted object, aka "RDP ActiveX Control Remote Code Execution Vulnerability."

Affected products

2
  • Microsoft/Remote Desktop Connection2 versions
    cpe:2.3:a:microsoft:remote_desktop_connection:6.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:remote_desktop_connection:6.1:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:remote_desktop_connection:7.0:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.