MS09-044: Description of the security update for Remote Desktop Client Version 5.2: August 11, 2009

Article ID: 958469 - View products that this article applies to.
Expand all | Collapse all

On This Page

INTRODUCTION

Microsoft has released security bulletin MS09-044. To view the complete security bulletin, visit one of the following Microsoft Web sites:

How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update
(http://support.microsoft.com/ph/6527)


Security solutions for IT professionals: TechNet Security Troubleshooting and Support
(http://technet.microsoft.com/security/bb980617.aspx)


Help protect your computer that is running Windows from viruses and malware: Virus Solution and Security Center
(http://support.microsoft.com/contactus/cu_sc_virsec_master)


Local support according to your country: International Support
(http://support.microsoft.com/common/international.aspx)


Back to the top | Give Feedback

MORE INFORMATION

Security update 958469 updates the following binaries:
Collapse this tableExpand this table
Binary nameStandard locations
Mstscax.dlla) %Windir%\System32
b) %SystemDrive%\Program Files\Remote Desktop
Mstsc.exea) %Windir%\System32
b) %SystemDrive%\Program Files\Remote Desktop
Msrdp.ocx%Windir%\Download Program Files
Msrdp.caba) %Windir%\Web\Tsweb
b) Install path under "hklm\software\microsoft\TS Web Clients" under value "InstallDir"
c) %SystemDrive%\Inetpub\Remote
Note The files are updated only if the files were already present on the client computer.

Security update 958469 updates the following binaries on the following operating systems:
Collapse this tableExpand this table
Mstscax.dllMsrdp.ocx Msrdp.cab Mstsc.exe
Windows Server 2003 YesYesYesNo
Windows XP YesNoNoYes
Note that in specific deployments on out-of-box versions of the RDP client, files may be renamed during installation. The file names listed in the "File information" in this article are the original names prior to installation.
Collapse this tableExpand this table
PlatformRDP versionName of the binary carried in the packageName of the binary after installation
Windows XP Professional with Service Pack 1, Service Pack 2, or Service Pack 35.22k3mstscax.dll and 2k3mstsc.exemstscax.dll and mstsc.exe
Windows XP Service Pack 25.22k3mstscax.dll and 2k3mstsc.exemstscax.dll and mstsc.exe

Known issues with this security update

After you install this update, gridlines may be visible in a terminal session window when you use Remote Desktop Client (RDC) to connect to a terminal server and then scroll up and down in a Web page in the terminal session. For more information about how to resolve this issue, click the following article numbers to view the articles in the Microsoft Knowledge Base:
975153
(http://support.microsoft.com/kb/975153/ )
A hotfix is available for Remote Desktop Client (RDC) 5.1 to fix a drawing failure after you apply the security update 958470 (MS09-044) on a computer that is running Windows XP Service Pack 2
975158
(http://support.microsoft.com/kb/975158/ )
A hotfix is available for Remote Desktop Client (RDC) 5.2 to fix a drawing failure after you apply the security update 958470 (MS09-044) on a computer that is running Windows XP Service Pack 3 or Windows Server 2003 Service Pack 2

Frequently asked questions

Question If I have an application that deploys the Remote Desktop Web Connection binaries in non-default locations, will this security update patch my installation?
Answer This update updates the Microsoft Remote Desktop Web Connection binaries in standard locations. If your redistributed Microsoft Remote Desktop Web Connection binaries are in a custom location, you will have to update the custom location with the updated Microsoft Remote Desktop Web Connection binaries.

Question Before I installed the security update, I had the RDC 5.1 version of Msrdp.ocx. After I installed the security update, I do not see the RDC 5.1 version of Msrdp.ocx. Why?
Answer After you install this security update, the RDC 5.1 version of Msrdp.ocx is upgraded to the RDC 5.2 version of Msrdp.ocx.

Question I installed the security update, and now if I try to use ActiveX component of MSTSC (Msrdp.ocx), I cannot connect. Why?
Answer The scenario is broken (see Figure 1) because server is not updated. Therefore, the server is still pushing the vulnerable Msrdp.ocx file to the clients. Before you install the security update, the client computer does not have the ActiveX control (Msrdp.ocx). After you install the security update, the vulnerable ActiveX ClassIds were blocked. Therefore, if you try to use the vulnerable ActiveX Msrdp.ocx by using Internet Explorer, you cannot connect until the client computer receives the new Msrdp.ocx file. To resolve the problem, follow these steps:
  • Reinstall the security update on the client workstation to update the older version of the Msrdp.ocx file that was downloaded from the server.

    Note The Msrdp.ocx file is updated only in the standard locations.
  • Ask your Web server administrators to update the server-side Msrdp.cab file by using the security update. Administrators should be aware that the update updates only Msrdp.cab files that are found in the standard locations. To update Msrdp.cab files that are in custom locations, follow these steps:
    1. Extract the update (KB) by using the KB /x:<path> command.
    2. Copy the Msrdp.cab from <location> to the custom path.
Collapse this imageExpand this image

Figure 1: The Remote Desktop Web connection will not work until the client receives an updated Msrdp.ocx file. Note that Windows Update will offer the update automatically if the vulnerable Msrdp.ocx file is available in the standard location on the computer. For more information, visit the following Microsoft Web site:
http://technet.microsoft.com/en-us/library/cc775764(WS.10).aspx
(http://technet.microsoft.com/en-us/library/cc775764(WS.10).aspx)
* This scenario works if you have RDC 6.0 or a later version installed on the client (workstation) computer.
Back to the top | Give Feedback
Question After I install the update, I do not have the Msrdp.ocx file. Why?
Answer This update updates only the files that were present on the computer before you installed the update. Therefore, if the Msrdp.ocx file was not on the Windows XP SP2-based computer before you installed the update, the Msrdp.ocx file is not downloaded to or installed on the computer. When the client obtains the Msrdp.ocx file, Windows Update reoffers the update to the client computer.

Question How can I determine whether I have the Msrdp.ocx file on my computer?
Answer To determine whether the Msrdp.ocx file exists in the default location, run the following command at a command prompt:
dir "%windir%\downloaded program files"


Question After I installed the update, I do not have the Msrdp.cab file. Why?
Answer This update updates only the files that were present on the computer before you installed the update. Therefore, if the Msrdp.cab file was not on the Windows XP SP2-based computer before you installed the update, the Msrdp.cab file is not downloaded to or installed on the computer.

Question I have an old Msrdp.cab file that is being redistributed from my Terminal Server Web Server computer. Are my clients vulnerable?
Answer Your updated client computers will not be vulnerable even if the server is not updated. We strongly recommend that you install the update on the Terminal Server Web Server computer so that redistributing of vulnerable Msrdp.ocx files can be prevented to any clients that are not updated.
Back to the top | Give Feedback

KB offer matrix based on the RDC version and platforms


RDC versions (in-band and Microsoft-supported out-of-band releases)
Collapse this tableExpand this table
RDC 5.0RDC 5.1RDC 5.2RDC 6.0RDC 6.1
Windows Vista RTMxxxKB956744*x
Windows Vista SP1 and Windows Vista SP2xxxxKB956744*
Windows XP SP2xKB958470*KB958469KB956744*KB956744*
Windows XP SP3xxKB958469xKB956744*
Windows Server 2003 SP2xxKB958469*KB956744*x
Windows 2000 SP4KB958471*KB958470*KB958470xx
Note In this table, x = not applicable.
Note In this table, almost all users are represented by the scenarios in the table that contain asterisks (*).

Back to the top | Give Feedback

FILE INFORMATION

The English (United States) version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

For all supported x86-based versions of Windows Server 2003

Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatformSP requirementService branch
Mstscax.dll5.2.3790.4524755,20006-Jun-200922:53x86SP2SP2GDR
Msrdp.ocx5.2.3790.4524760,32007-Jun-200911:23x86SP2SP2GDR\MSRDP.CAB_CAB_FILES
Mstscax.dll5.2.3790.4524755,20006-Jun-200923:02x86SP2SP2QFE
Msrdp.ocx5.2.3790.4522759,80806-Jun-200923:01x86SP2SP2QFE\ARA
Msrdp.ocx5.2.3790.4522759,80806-Jun-200923:01x86SP2SP2QFE\BR
Msrdp.ocx5.2.3790.4522757,24806-Jun-200923:01x86SP2SP2QFE\CHS
Msrdp.ocx5.2.3790.4522757,24806-Jun-200923:01x86SP2SP2QFE\CHT
Msrdp.ocx5.2.3790.4522759,80806-Jun-200923:01x86SP2SP2QFE\CS
Msrdp.ocx5.2.3790.4522760,32006-Jun-200923:01x86SP2SP2QFE\DA
Msrdp.ocx5.2.3790.4522761,85606-Jun-200923:01x86SP2SP2QFE\EL
Msrdp.ocx5.2.3790.4522760,32006-Jun-200923:02x86SP2SP2QFE\ENU
Msrdp.ocx5.2.3790.4522760,32006-Jun-200923:01x86SP2SP2QFE\ES
Msrdp.ocx5.2.3790.4522760,32006-Jun-200923:01x86SP2SP2QFE\FI
Msrdp.ocx5.2.3790.4522760,83206-Jun-200923:01x86SP2SP2QFE\FR
Msrdp.ocx5.2.3790.4522761,34406-Jun-200923:01x86SP2SP2QFE\GER
Msrdp.ocx5.2.3790.4522759,29606-Jun-200923:01x86SP2SP2QFE\HEB
Msrdp.ocx5.2.3790.4522760,32006-Jun-200923:01x86SP2SP2QFE\HU
Msrdp.ocx5.2.3790.4522760,32006-Jun-200923:01x86SP2SP2QFE\IT
Msrdp.ocx5.2.3790.4522758,27208-Jun-200907:46x86SP2SP2QFE\JPN
Msrdp.ocx5.2.3790.4522758,27206-Jun-200923:01x86SP2SP2QFE\KOR
Msrdp.ocx5.2.3790.4524760,32007-Jun-200911:32x86SP2SP2QFE\MSRDP.CAB_CAB_FILES
Msrdp.ocx5.2.3790.4522760,83206-Jun-200923:01x86SP2SP2QFE\NL
Msrdp.ocx5.2.3790.4522760,83206-Jun-200923:01x86SP2SP2QFE\NO
Msrdp.ocx5.2.3790.4522760,32006-Jun-200923:01x86SP2SP2QFE\PL
Msrdp.ocx5.2.3790.4522760,32006-Jun-200923:02x86SP2SP2QFE\PT
Msrdp.ocx5.2.3790.4522760,83206-Jun-200923:02x86SP2SP2QFE\RU
Msrdp.ocx5.2.3790.4522760,32006-Jun-200923:02x86SP2SP2QFE\SV
Msrdp.ocx5.2.3790.4522760,32006-Jun-200923:02x86SP2SP2QFE\TR
Msrdpcustom.dllNot Applicable17,40806-Jun-200922:53x86NoneNot Applicable

For all supported x86-based versions of Windows XP

Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatformSP requirementService branch
2k3mstsc.exe5.2.3790.4522421,37609-Jun-200910:15x86SP3SP3GDR
2k3mstscax.dll5.2.3790.4524755,20009-Jun-200915:32x86SP3SP3GDR
2k3mstsc.exe5.2.3790.4522421,37609-Jun-200910:15x86SP3SP3QFE
2k3mstscax.dll5.2.3790.4524755,20009-Jun-200915:27x86SP3SP3QFE

For all supported x64-based versions of Windows Server 2003 and Windows XP

Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatformSP requirementService branch
Mstscax.dll5.2.3790.45241,079,80808-Jun-200907:09x64SP2SP2GDR
Msrdp.ocx5.2.3790.4524760,32007-Jun-200911:23x86SP2SP2GDR\MSRDP.CAB_CAB_FILES
Wmstscax.dll5.2.3790.4524755,20008-Jun-200907:09x86SP2SP2GDR\WOW
Mstscax.dll5.2.3790.45241,079,80807-Jun-200912:44x64SP2SP2QFE
Msrdp.ocx5.2.3790.4522759,80807-Jun-200912:44x86SP2SP2QFE\ARA
Msrdp.ocx5.2.3790.4522759,80807-Jun-200912:44x86SP2SP2QFE\BR
Msrdp.ocx5.2.3790.4522757,24807-Jun-200912:44x86SP2SP2QFE\CHS
Msrdp.ocx5.2.3790.4522757,24807-Jun-200912:44x86SP2SP2QFE\CHT
Msrdp.ocx5.2.3790.4522759,80807-Jun-200912:44x86SP2SP2QFE\CS
Msrdp.ocx5.2.3790.4522760,32007-Jun-200912:44x86SP2SP2QFE\DA
Msrdp.ocx5.2.3790.4522761,85607-Jun-200912:44x86SP2SP2QFE\EL
Msrdp.ocx5.2.3790.4522760,32007-Jun-200912:44x86SP2SP2QFE\ENU
Msrdp.ocx5.2.3790.4522760,32007-Jun-200912:44x86SP2SP2QFE\ES
Msrdp.ocx5.2.3790.4522760,32007-Jun-200912:44x86SP2SP2QFE\FI
Msrdp.ocx5.2.3790.4522760,83207-Jun-200912:44x86SP2SP2QFE\FR
Msrdp.ocx5.2.3790.4522761,34407-Jun-200912:44x86SP2SP2QFE\GER
Msrdp.ocx5.2.3790.4522759,29607-Jun-200912:44x86SP2SP2QFE\HEB
Msrdp.ocx5.2.3790.4522760,32007-Jun-200912:44x86SP2SP2QFE\HU
Msrdp.ocx5.2.3790.4522760,32007-Jun-200912:44x86SP2SP2QFE\IT
Msrdp.ocx5.2.3790.4522758,27207-Jun-200912:44x86SP2SP2QFE\JPN
Msrdp.ocx5.2.3790.4522758,27207-Jun-200912:44x86SP2SP2QFE\KOR
Msrdp.ocx5.2.3790.4524760,32007-Jun-200911:32x86SP2SP2QFE\MSRDP.CAB_CAB_FILES
Msrdp.ocx5.2.3790.4522760,83207-Jun-200912:44x86SP2SP2QFE\NL
Msrdp.ocx5.2.3790.4522760,83207-Jun-200912:44x86SP2SP2QFE\NO
Msrdp.ocx5.2.3790.4522760,32007-Jun-200912:44x86SP2SP2QFE\PL
Msrdp.ocx5.2.3790.4522760,32007-Jun-200912:44x86SP2SP2QFE\PT
Msrdp.ocx5.2.3790.4522760,83207-Jun-200912:44x86SP2SP2QFE\RU
Msrdp.ocx5.2.3790.4522760,32007-Jun-200912:44x86SP2SP2QFE\SV
Msrdp.ocx5.2.3790.4522760,32007-Jun-200912:44x86SP2SP2QFE\TR
Wmstscax.dll5.2.3790.4524755,20007-Jun-200912:44x86SP2SP2QFE\WOW
Msrdpcustom.dllNot Applicable18,94408-Jun-200908:35x64NoneNot Applicable

For all supported IA-64-based versions of Windows Server 2003

Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatformSP requirementService branch
Mstscax.dll5.2.3790.45242,077,69608-Jun-200907:08IA-64SP2SP2GDR
Msrdp.ocx5.2.3790.4524760,32007-Jun-200911:23x86SP2SP2GDR\MSRDP.CAB_CAB_FILES
Wmstscax.dll5.2.3790.4524755,20008-Jun-200907:09x86SP2SP2GDR\WOW
Mstscax.dll5.2.3790.45242,077,69607-Jun-200912:44IA-64SP2SP2QFE
Msrdp.ocx5.2.3790.4522759,80807-Jun-200912:44x86SP2SP2QFE\ARA
Msrdp.ocx5.2.3790.4522759,80807-Jun-200912:44x86SP2SP2QFE\BR
Msrdp.ocx5.2.3790.4522757,24807-Jun-200912:44x86SP2SP2QFE\CHS
Msrdp.ocx5.2.3790.4522757,24807-Jun-200912:44x86SP2SP2QFE\CHT
Msrdp.ocx5.2.3790.4522759,80807-Jun-200912:44x86SP2SP2QFE\CS
Msrdp.ocx5.2.3790.4522760,32007-Jun-200912:44x86SP2SP2QFE\DA
Msrdp.ocx5.2.3790.4522761,85607-Jun-200912:44x86SP2SP2QFE\EL
Msrdp.ocx5.2.3790.4522760,32007-Jun-200912:44x86SP2SP2QFE\ENU
Msrdp.ocx5.2.3790.4522760,32007-Jun-200912:44x86SP2SP2QFE\ES
Msrdp.ocx5.2.3790.4522760,32007-Jun-200912:44x86SP2SP2QFE\FI
Msrdp.ocx5.2.3790.4522760,83207-Jun-200912:44x86SP2SP2QFE\FR
Msrdp.ocx5.2.3790.4522761,34407-Jun-200912:44x86SP2SP2QFE\GER
Msrdp.ocx5.2.3790.4522759,29607-Jun-200912:44x86SP2SP2QFE\HEB
Msrdp.ocx5.2.3790.4522760,32007-Jun-200912:44x86SP2SP2QFE\HU
Msrdp.ocx5.2.3790.4522760,32007-Jun-200912:44x86SP2SP2QFE\IT
Msrdp.ocx5.2.3790.4522758,27207-Jun-200912:44x86SP2SP2QFE\JPN
Msrdp.ocx5.2.3790.4522758,27207-Jun-200912:44x86SP2SP2QFE\KOR
Msrdp.ocx5.2.3790.4524760,32007-Jun-200911:32x86SP2SP2QFE\MSRDP.CAB_CAB_FILES
Msrdp.ocx5.2.3790.4522760,83207-Jun-200912:44x86SP2SP2QFE\NL
Msrdp.ocx5.2.3790.4522760,83207-Jun-200912:44x86SP2SP2QFE\NO
Msrdp.ocx5.2.3790.4522760,32007-Jun-200912:44x86SP2SP2QFE\PL
Msrdp.ocx5.2.3790.4522760,32007-Jun-200912:44x86SP2SP2QFE\PT
Msrdp.ocx5.2.3790.4522760,83207-Jun-200912:44x86SP2SP2QFE\RU
Msrdp.ocx5.2.3790.4522760,32007-Jun-200912:44x86SP2SP2QFE\SV
Msrdp.ocx5.2.3790.4522760,32007-Jun-200912:44x86SP2SP2QFE\TR
Wmstscax.dll5.2.3790.4524755,20007-Jun-200912:44x86SP2SP2QFE\WOW
Msrdpcustom.dllNot Applicable31,74408-Jun-200908:35IA-64NoneNot Applicable
Back to the top | Give Feedback

Properties

Article ID: 958469 - Last Review: May 9, 2012 - Revision: 9.0
APPLIES TO
  • Microsoft Windows Server 2003 Service Pack 2, when used with:
    • Microsoft Windows Server 2003, Web Edition
    • Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
    • Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
    • Microsoft Windows Server 2003, Standard Edition (32-bit x86)
    • Microsoft Windows Server 2003, Datacenter x64 Edition
    • Microsoft Windows Server 2003, Enterprise x64 Edition
    • Microsoft Windows Server 2003, Standard x64 Edition
    • Microsoft Windows Server 2003, Datacenter Edition for Itanium-Based Systems
    • Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems
    • Microsoft Windows XP Professional x64 Edition
Keywords: 
kbfix kbbug kbqfe kbsecvulnerability kbsecurity kbsecbulletin kbaccelerators kbsurveynew kbexpertiseinter kbexpertisebeginner KB958469
Back to the top | Give Feedback

Give Feedback

 
Back to the topBack to the top