That was actually posted back in August. I think you may be confusing this with the RDP bug 12-020.
Regardless, with any of these bulletins the process varies. Sometimes the bulletin will provide SOME detail or some vague idea of what was reported. More often than not, they hardly say anything specific.
In the case of protocol bugs, you would just need to know how the protocol works and begin fuzzing. RDP is very complex and getting 12-020 to be exploitable never hit a public exploit database. There are rumors that one is available though.
To generate application specific packets, you can use tools like scapy. Scapy allows you create any type of packet you want. Understanding how the protocol works would be critical though, otherwise your packets wont matter.
I'm not trying to do so, but I am tring to understand the process.
Why not?! That would be quite a notch in the belt...
PS - A little more info on the bulletin you mentioned (12-054)
http://blogs.technet.com/b/srd/archive/2012/08/14/ms12-054-not-all-remote-pre-auth-vulnerabilities-are-equally-appetizing-for-worms.aspx
Network Pen Testing : Tomcat authentication with sqlmap
