← Database

CVE-2009-2523

CRITICAL CVSS: 10.0 Published: 2009-11-11 Modified: 2026-06-16

Description

The License Logging Server (llssrv.exe) in Microsoft Windows 2000 SP4 allows remote attackers to execute arbitrary code via an RPC message containing a string without a null terminator, which triggers a heap-based buffer overflow in the LlsrLicenseRequestW method, aka "License Logging Server Heap Overflow Vulnerability."

Affected Platforms

Microsoft Windows 2000

Weakness Type

CWE-125, CWE-787

References