CVE-2009-1929
published 2009-08-12CVE-2009-1929: Heap-based buffer overflow in the Microsoft Terminal Services Client ActiveX control running RDP 6.1 on Windows XP SP2, Vista SP1 or SP2, or Server 2008 Gold…
PriorityP262critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
34.53%
98.2th percentile
Heap-based buffer overflow in the Microsoft Terminal Services Client ActiveX control running RDP 6.1 on Windows XP SP2, Vista SP1 or SP2, or Server 2008 Gold or SP2; or 5.2 or 6.1 on Windows XP SP3; allows remote attackers to execute arbitrary code via unspecified parameters to unknown methods, aka "Remote Desktop Connection ActiveX Control Heap Overflow Vulnerability."
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | windows_2003_server | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://osvdb.org/56912http://secunia.com/advisories/36229http://www.securityfocus.com/bid/35973http://www.securitytracker.com/id?1022709http://www.us-cert.gov/cas/techalerts/TA09-223A.htmlhttp://www.vupen.com/english/advisories/2009/2238https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-044https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6329http://osvdb.org/56912http://secunia.com/advisories/36229http://www.securityfocus.com/bid/35973http://www.securitytracker.com/id?1022709http://www.us-cert.gov/cas/techalerts/TA09-223A.htmlhttp://www.vupen.com/english/advisories/2009/2238https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-044https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6329
2009-08-12
Published