Windows developed by Microsoft Corporation is a windowing operating system.
When an unauthenticated attacker to use RDP to connect to the target system and sends a request specially designed, Remote Desktop Services (formerly known as "Terminal Services") A remote code execution vulnerability. This vulnerability is a pre-authentication, without user interaction.
<* Source: Microsoft
Link: https: //portal.msrc.microsoft.com/zh-CN/security-guidance/advisory/CVE-2019-0708
*>
Solution
Manufacturers patch:
Microsoft
---------
Microsoft has released a security bulletin (CVE-2019-0708) and the corresponding patch:
CVE-2019-0708: Microsoft Windows Remote Desktop Services remote code execution vulnerability.
Links: https://portal.msrc.microsoft.com/zh-CN/security-guidance/advisory/CVE-2019-0708
https://support.microsoft.com/en-us/help/4500331/windows-update-kb4500331