Microsoft Windows RDP 'rdpwd.sys' Remote Kernel DoS
A denial of service vulnerability exists within the Remote Desktop Services which allows for an attacker to send a specially crafted RDP packet in order to crash the remote vulnerable system. This flaw specifically exists within the rdpwd.sys driver file which is used by the Remote Desktop Services. It appears that the problem exists because RDP does not release the memory it is using. The kernel can only use a certain amount of physical memory. So when RDP goes over its memory limit, it causes the crash.
Release Date:
August 9, 2005
Date Reported:
May 4, 2005
Severity:
Medium
Vendor:
Microsoft
Systems Affected:
Microsoft Windows 2000 Service Pack 4
Microsoft Windows XP Service Pack 1
Microsoft Windows XP Service Pack 2
Microsoft Windows XP Professional x64 Edition
Microsoft Windows Server 2003
Microsoft Windows Server 2003 for Itanium-based Systems
Microsoft Windows Server 2003 Service Pack 1
Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
Microsoft Windows Server 2003 x64 Edition
