CVEvulnerability
CVE-2009-1924
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-08-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-189
Description
Integer overflow in the Windows Internet Name Service (WINS) component for Microsoft Windows 2000 SP4 allows remote WINS replication partners to execute arbitrary code via crafted data structures in a packet, aka "WINS Integer Overflow Vulnerability."
Affected configurations
• microsoft windows 2000
• microsoft windows 2003 server
Related
Weakness · not in database (1)
References
- http://www.us-cert.gov/cas/techalerts/TA09-223A.html US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-039 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6354 oval.cisecurity.org
- http://www.us-cert.gov/cas/techalerts/TA09-223A.html US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-039 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6354 oval.cisecurity.org