← Database

CVE-2009-1929

CRITICAL CVSS: 9.3 Published: 2009-08-12 Modified: 2026-06-16

Description

Heap-based buffer overflow in the Microsoft Terminal Services Client ActiveX control running RDP 6.1 on Windows XP SP2, Vista SP1 or SP2, or Server 2008 Gold or SP2; or 5.2 or 6.1 on Windows XP SP3; allows remote attackers to execute arbitrary code via unspecified parameters to unknown methods, aka "Remote Desktop Connection ActiveX Control Heap Overflow Vulnerability."

Affected Platforms

Microsoft Windows Server 2008Microsoft Windows XpMicrosoft Windows 2003 ServerMicrosoft Windows Vista

Weakness Type

CWE-119

References