CVE-2009-1929

CWE-119 — Buffer Overflow3 documents3 sources
Severity
9.3CRITICAL
EPSS
67.4%
top 1.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Windows 2003 Server
Timeline
PublishedAug 12
Latest updateMay 2

Description

Heap-based buffer overflow in the Microsoft Terminal Services Client ActiveX control running RDP 6.1 on Windows XP SP2, Vista SP1 or SP2, or Server 2008 Gold or SP2; or 5.2 or 6.1 on Windows XP SP3; allows remote attackers to execute arbitrary code via unspecified parameters to unknown methods, aka "Remote Desktop Connection ActiveX Control Heap Overflow Vulnerability."

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

Patches

Patch: www.securityfocus.com ↗Patch: www.vupen.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-49ph-hwvm-6g78: Heap-based buffer overflow in the Microsoft Terminal Services Client ActiveX control running RDP 6↗2022-05-02
▶
CVEList
CVE-2009-1929: Heap-based buffer overflow in the Microsoft Terminal Services Client ActiveX control running RDP 6↗2009-08-12
▶
CVE-2009-1929 (CRITICAL CVSS 9.3) | Heap-based buffer overflow in the M | cvebase.io