Even though The CVE-2012-002 was reported privately and there is no known attacks in the wild, researchers anticipate that an exploit for code execution will be developed in the next 30 days.
RDP is famous method for controlling remote Windows machines; RDP is disabled by default. If you have enabled Remote Desktop, Researchers encourages you to update your products.
Further details about the vulnerability can be found here.