{"id":"CVE-2009-1133","aliases":["EUVD-2009-1134","GHSA-x679-rfx3-vg73"],"status":"published","title":"Heap-based buffer overflow in Microsoft Remote Desktop Connection (formerly Terminal Services...","description":"Heap-based buffer overflow in Microsoft Remote Desktop Connection (formerly Terminal Services Client) running RDP 5.0 through 6.1 on Windows, and Remote Desktop Connection Client for Mac 2.0, allows remote attackers to execute arbitrary code via unspecified parameters, aka \"Remote Desktop Connection Heap Overflow Vulnerability.\"","severity":{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.30496,"percentile":0.9825,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119"],"published":"2009-08-12T17:00:00Z","modified":"2026-06-16T23:06:34Z","products":[{"vendor":"microsoft","product":"windows_2000"},{"vendor":"microsoft","product":"windows_server"},{"vendor":"microsoft","product":"windows_server_2003"},{"vendor":"microsoft","product":"windows_server_2008"},{"vendor":"microsoft","product":"windows_vista"},{"vendor":"microsoft","product":"windows_xp"}],"references":[{"url":"http://www.securitytracker.com/id?1022709","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-223A.html","tags":["third-party-advisory","x_refsource_CERT","x_transferred","US Government Resource"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5693","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2009/2238","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/36229","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-044","tags":["vendor-advisory","x_refsource_MS","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-1133"},{"url":"https://github.com/advisories/GHSA-x679-rfx3-vg73"}],"sources":{"cve":[{"id":"CVE-2009-1133","description":"Heap-based buffer overflow in Microsoft Remote Desktop Connection (formerly Terminal Services Client) running RDP 5.0 through 6.1 on Windows, and Remote Desktop Connection Client for Mac 2.0, allows remote attackers to execute arbitrary code via unspecified parameters, aka \"Remote Desktop Connection Heap Overflow Vulnerability.\"","status":"published","published":"2009-08-12T17:00:00Z","modified":"2024-08-07T05:04:48.248Z","updated_at":"2026-11-02T14:33:25.516454Z"}],"euvd":[{"id":"EUVD-2009-1134","description":"Heap-based buffer overflow in Microsoft Remote Desktop Connection (formerly Terminal Services Client) running RDP 5.0 through 6.1 on Windows, and Remote Desktop Connection Client for Mac 2.0, allows remote attackers to execute arbitrary code via unspecified parameters, aka \"Remote Desktop Connection Heap Overflow Vulnerability.\"","status":"published","published":"2009-08-12T17:00:00Z","modified":"2024-08-07T05:04:48Z","updated_at":"2026-11-03T01:39:22.935477Z"}],"ghsa":[{"id":"GHSA-x679-rfx3-vg73","title":"Heap-based buffer overflow in Microsoft Remote Desktop Connection (formerly Terminal Services...","description":"Heap-based buffer overflow in Microsoft Remote Desktop Connection (formerly Terminal Services Client) running RDP 5.0 through 6.1 on Windows, and Remote Desktop Connection Client for Mac 2.0, allows remote attackers to execute arbitrary code via unspecified parameters, aka \"Remote Desktop Connection Heap Overflow Vulnerability.\"","status":"published","published":"2022-05-02T03:22:02Z","modified":"2023-01-31T05:07:22Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:49:12.176696Z"}],"nvd":[{"id":"CVE-2009-1133","description":"Heap-based buffer overflow in Microsoft Remote Desktop Connection (formerly Terminal Services Client) running RDP 5.0 through 6.1 on Windows, and Remote Desktop Connection Client for Mac 2.0, allows remote attackers to execute arbitrary code via unspecified parameters, aka \"Remote Desktop Connection Heap Overflow Vulnerability.\"","status":"published","published":"2009-08-12T17:30:00.42Z","modified":"2026-06-16T23:06:34.697Z","cvss":[{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:01:36.200173Z"}]}}