CVE-2019-0708 – Remote Desktop Protocol and Remote Code Execution #Bluekeep

By FortiGuard SE Team | May 23, 2019

On May 14th, 2019, Microsoft released their usual set of updates, referred to within the industry as “Patch Tuesday.” At first glance, the inclusion of CVE-2019-0708 appeared to be similar to all the other updates released on that day—it included a writeup containing an overview of the update, including the Impact (Remote Code Execution), Severity (Critical), and Platforms (multiple) affected.

However, what piqued the curiosity of the security community was that the platforms listed as affected by this vulnerability were products considered to be no longer supported by Microsoft:

Windows XP SP3 x86, Windows XP Professional x64 Edition SP2, Windows XP Embedded SP3 x86, Windows Server 2003 SP2 x86, and Windows Server 2003 x64 Edition SP2.

In fact, Windows XP support ended on April 8, 2014, and Windows Server 2003 support ended on July 14, 2015.

Full Article.