Unscored severity · published Aug 12, 2009
CVE-2009-1133
Heap-based buffer overflow in Microsoft Remote Desktop Connection (formerly Terminal Services Client) running RDP 5.0 through 6.1 on Windows, and Remote Desktop Connection Client…
–
CVSS
30.5%
EPSS
No
On KEV
Description
Heap-based buffer overflow in Microsoft Remote Desktop Connection (formerly Terminal Services Client) running RDP 5.0 through 6.1 on Windows, and Remote Desktop Connection Client for Mac 2.0, allows remote attackers to execute arbitrary code via unspecified parameters, aka "Remote Desktop Connection Heap Overflow Vulnerability."
Exploitation
Is it being used?
Exploit prediction (EPSS)30.5% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WI
Windows · Microsoft
2003 · source: NVD
W2
Windows 2000 · Microsoft
All versions, or not specified · source: NVD
WS
Windows Server 2003 · Microsoft
All versions, or not specified · source: NVD
WS
Windows Server 2008 · Microsoft
All versions, or not specified · source: NVD
WV
Windows Vista · Microsoft
All versions, or not specified · source: NVD
WX
Windows XP · Microsoft
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-1133
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-1133
Vendor Advisory
http://secunia.com/advisories/36229
www.securitytracker.com
http://www.securitytracker.com/id?1022709
US Government Resource
http://www.us-cert.gov/cas/techalerts/TA09-223A.html
Patch
http://www.vupen.com/english/advisories/2009/2238
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-044
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5693
More from Windows
10.0
CVE-2020-1350
Microsoft Windows DNS Server Remote Code Execution Vulnerability
9.8
CVE-2025-59287
Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
9.8
CVE-2019-0708
Microsoft Remote Desktop Services Remote Code Execution Vulnerability
9.8
CVE-2017-8543
Microsoft Windows Search Remote Code Execution Vulnerability
9.8
CVE-2008-4250
Microsoft Windows Buffer Overflow Vulnerability