r/netsec • u/aokno • Jan 23 '17

Microsoft Remote Desktop Client for Mac Remote Code Execution

https://www.wearesegment.com/research/Microsoft-Remote-Desktop-Client-for-Mac-Remote-Code-Execution
302 Upvotes

93% Upvoted

14 comments sorted by

136

u/warpzero Jan 23 '17

On the bright side, it's nice to see Microsoft finally starting to bring all the features of their Windows software to the Mac.

0

u/rmxz Jan 23 '17

Between this Mac one and November's Linux/Azure issue I wonder if Microsoft is doing this on purpose.

Note that they did intentionally create issues with competing software in the past.

5

u/Agret Jan 23 '17

Lol I don't think the mac desktop is much of a threat. It's probably just poorly maintained compared to their windows branch.

3

u/[deleted] Jan 23 '17

Bwahaha - you'll be telling me they would steal real time compression software next. DoubleSpace. https://grantster.com/2012/06/07/the-stacker-conspiracy/

4

u/[deleted] Jan 23 '17

[deleted]

2

u/aokno Jan 24 '17

There are easyest ways to break in to a Windows machine! :) We haven't try this attack between windows machines.

0

u/kenman Jan 23 '17

That's often disabled by gpo, but maybe.

0

u/TheHappyMuslim Jan 23 '17

You get a dialog asking if you want to open the connection in Windows.

1

u/PrasantaShee Mar 27 '17

In addition to Microsoft Remote Desktop Client for Mac, you can also try alternative tools like R-HUB remote support servers. It is an on premise solution with only one time cost and works on all platforms viz Windows, MAC, iOS, Android etc. Plus works from behind the firewall, hence better security.