A Dissection of the “Esteem Audit” Windows Remote Desktop Exploit
A group calling itself the Shadow Brokers released a cache of stolen tools in April 2017, including EsteemAudit, which exploits CVE-2017-9073 in the Windows Remote Desktop service on Windows XP and Windows Server 2003. The flaw is an inter-chunk heap...