CVEvulnerability
CVE-2009-1132
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-09-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Heap-based buffer overflow in the Wireless LAN AutoConfig Service (aka Wlansvc) in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a malformed wireless frame, aka "Wireless Frame Parsing Remote Code Execution Vulnerability."
Affected configurations
• microsoft windows server 2008
• microsoft windows vista
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://www.us-cert.gov/cas/techalerts/TA09-251A.html US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-049 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6389 oval.cisecurity.org
- http://www.us-cert.gov/cas/techalerts/TA09-251A.html US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-049 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6389 oval.cisecurity.org