CVE-2009-0568

The RPC Marshalling Engine (aka NDR) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly maintain its internal state, which allows remote attackers to overwrite arbitrary memory locations via a crafted RPC message that triggers incorrect pointer reading, related to "IDL interfaces containing a non-conformant varying array" and FC_SMVARRAY, FC_LGVARRAY, FC_VARIABLE_REPEAT, and FC_VARIABLE_OFFSET, aka "RPC Marshalling Engine Vulnerability."

• CWE-264

• http://blogs.technet.com/srd/archive/2009/06/09/ms09-026-how-a-developer-can-know-if-their-rpc-interface-is-affected.aspxVendor Advisory
• http://osvdb.org/54936Broken Link
• http://www.securityfocus.com/bid/35219Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1022357Third Party Advisory, VDB Entry
• http://www.us-cert.gov/cas/techalerts/TA09-160A.htmlThird Party Advisory, US Government Resource
• http://www.vupen.com/english/advisories/2009/1545Third Party Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-026
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6227Third Party Advisory
• http://blogs.technet.com/srd/archive/2009/06/09/ms09-026-how-a-developer-can-know-if-their-rpc-interface-is-affected.aspxVendor Advisory
• http://osvdb.org/54936Broken Link
• http://www.securityfocus.com/bid/35219Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1022357Third Party Advisory, VDB Entry
• http://www.us-cert.gov/cas/techalerts/TA09-160A.htmlThird Party Advisory, US Government Resource
• http://www.vupen.com/english/advisories/2009/1545Third Party Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-026
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6227Third Party Advisory

Published

Jun 10, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-0561Integer overflow in Excel in Microsoft Office 2000 SP3, Offi…
• CVE-2009-0562The Office Web Components ActiveX Control in Microsoft Offic…
• CVE-2009-0563Stack-based buffer overflow in Microsoft Office Word 2002 SP…7.8
• CVE-2009-0565Buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3,…
• CVE-2009-0566Microsoft Office Publisher 2007 SP1 does not properly calcul…
• CVE-2009-0567Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2009-0569Buffer overflow in Becky! Internet Mail 2.48.02 and earlier …
• CVE-2009-0570Directory traversal vulnerability in send.php in Ninja Desig…
• CVE-2009-0571admin.php in Ninja Designs Mailist 3.0 stores backup copies …
• CVE-2009-0572PHP remote file inclusion vulnerability in include/flatnux.p…
• CVE-2009-0573Multiple cross-site scripting (XSS) vulnerabilities in FotoW…
• CVE-2009-0574SQL injection vulnerability in index.php in Easy CafeEngine …