CVE-2019-1108 PoC — Microsoft Remote Desktop Protocol Client 信息泄露漏洞

Source

https://github.com/Lanph3re/cve-2019-1108

Associated Vulnerability

Title:Microsoft Remote Desktop Protocol Client 信息泄露漏洞 (CVE-2019-1108)
Description:An information disclosure vulnerability exists when the Windows RDP client improperly discloses the contents of its memory, aka 'Remote Desktop Protocol Client Information Disclosure Vulnerability'.

Readme

# CVE-2019-1108 Exploitation

```
CVE-2019-1108
Remote Desktop Protocol Client Information Disclosure Vulnerability
Published: 07/09/2019 | Last Updated : 11/19/2019
MITRE CVE-2019-1108

An information disclosure vulnerability exists when the Windows RDP client improperly discloses the contents of its memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.

To exploit this vulnerability, an attacker would have to connect remotely to an affected system and run a specially crafted application.

The security update addresses the vulnerability by correcting how the Windows RDP client initializes memory.
```

![leak](./leak.png)

File Snapshot


 [4.0K]  /data/pocs/b2483f6c4514c927cf80b877ca8382b2ccfcde63
├── [7.9K]  cve-2019-1108.cc
├── [117K]  leak.png
└── [ 710]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!