CVE-2011-0029: Microsoft Remote Desktop Connection Client

High severity, CVSS 7.4. EPSS: 7.2% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in the client in Microsoft Remote Desktop Connection 5.2, 6.0, 6.1, and 7.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .rdp file, aka "Remote Desktop Insecure Library Loading Vulnerability."

Affected products

• Microsoft Remote Desktop Connection Client: version 5.2 only; version 6.0 only; version 7.0 only; version 6.1 only
• Microsoft Windows 2003 Server: any version
• Microsoft Windows 7: affected versions not specified
• Microsoft Windows Server 2003: any version
• Microsoft Windows Server 2008: version r2 only; any version; affected versions not specified
• Microsoft Windows Vista: any version
• Microsoft Windows XP: affected versions not specified; any version

Published 2011-03-09. Last modified 2026-06-16.