CVEvulnerability
CVE-2009-1133
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-08-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Heap-based buffer overflow in Microsoft Remote Desktop Connection (formerly Terminal Services Client) running RDP 5.0 through 6.1 on Windows, and Remote Desktop Connection Client for Mac 2.0, allows remote attackers to execute arbitrary code via unspecified parameters, aka "Remote Desktop Connection Heap Overflow Vulnerability."
Affected configurations
• microsoft windows 2000
• microsoft windows server 2003
• microsoft windows server 2008
• microsoft windows vista
• microsoft windows xp
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/36229 Vendor Advisory
- http://www.securitytracker.com/id?1022709 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA09-223A.html US Government Resource
- http://www.vupen.com/english/advisories/2009/2238 Patch, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-044 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5693 oval.cisecurity.org
- http://secunia.com/advisories/36229 Vendor Advisory
- http://www.securitytracker.com/id?1022709 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA09-223A.html US Government Resource
- http://www.vupen.com/english/advisories/2009/2238 Patch, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-044 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5693 oval.cisecurity.org