We've released an important security update (Version 1.0.954) for XP/VS Terminal Server and Remote Desktop Host (RDH), please update your installations.

All versions before 1.0.954 are affected by a security issue that could allow unprivileged users to perform arbitrary memory read and write operations on the system by crafting malicious IRPs.

The vulnerability can not be exploited remotely, it requires a local attacker.

The issue was discovered & reported by Nirmal Singh of Zscaler ThreatLabz.

In addition this version enables the Webcam redirection on XP/VS servers running on Windows Home editions!