RULE(RULE ID:310692)

Rule General Information
Release Date: 2014-04-02
Rule Name: WEB-ACTIVEX Microsoft Windows Remote Desktop Client ActiveX Control Use After Free -6 (CVE-2013-1296)
Severity:
CVE ID:
Rule Protection Details
Description: A code execution vulnerability exists in the Microsoft Remote Desktop Client ActiveX control mstscax.dll. The vulnerability is due to a use-after-free error when handling specially crafted HTML web pages.
Impact: Remote code execution
Affected OS: Windows
Reference: CVE-2013-1296
MicrosoftSecurityBulletin:MS13-029
Solutions
Update vendor's patch.