CVE-2009-1929

Heap-based buffer overflow in the Microsoft Terminal Services Client ActiveX control running RDP 6.1 on Windows XP SP2, Vista SP1 or SP2, or Server 2008 Gold or SP2; or 5.2 or 6.1 on Windows XP SP3; allows remote attackers to execute arbitrary code via unspecified parameters to unknown methods, aka "Remote Desktop Connection ActiveX Control Heap Overflow Vulnerability."

• CWE-119

• http://osvdb.org/56912
• http://secunia.com/advisories/36229Vendor Advisory
• http://www.securityfocus.com/bid/35973Patch
• http://www.securitytracker.com/id?1022709
• http://www.us-cert.gov/cas/techalerts/TA09-223A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2009/2238Patch, Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-044
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6329
• http://osvdb.org/56912
• http://secunia.com/advisories/36229Vendor Advisory
• http://www.securityfocus.com/bid/35973Patch
• http://www.securitytracker.com/id?1022709
• http://www.us-cert.gov/cas/techalerts/TA09-223A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2009/2238Patch, Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-044
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6329

Published

Aug 12, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-1923Heap-based buffer overflow in the Windows Internet Name Serv…
• CVE-2009-1924Integer overflow in the Windows Internet Name Service (WINS)…
• CVE-2009-1925The TCP/IP implementation in Microsoft Windows Vista Gold, S…
• CVE-2009-1926Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2,…
• CVE-2009-1927Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2009-1928Stack consumption vulnerability in the LDAP service in Activ…
• CVE-2009-1930The Telnet service in Microsoft Windows 2000 SP4, XP SP2 and…
• CVE-2009-1932Multiple integer overflows in the (1) user_info_callback, (2…
• CVE-2009-1933Kerberos in Sun Solaris 8, 9, and 10, and OpenSolaris before…
• CVE-2009-1934Cross-site scripting (XSS) vulnerability in the Reverse Prox…
• CVE-2009-1935Integer overflow in the pipe_build_write_buffer function (sy…
• CVE-2009-1936_functions.php in cpCommerce 1.2.x, possibly including 1.2.9…9.8