CVE-2011-0029
No fix known EPSS 7%CVSS 7.4
Untrusted search path vulnerability in the client in Microsoft Remote Desktop Connection 5.2, 6.0, 6.1, and 7.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .rdp file, aka "Remote Desktop Insecure Library Loading Vulnerability."
Products: microsoft remote_desktop_connection_client, microsoft windows_2003_server, microsoft windows_server_2003, microsoft windows_xp, microsoft windows_7, microsoft windows_server_2008, microsoft windows_vista