CVEs-PoC/2009/CVE-2009-1929.md

CVE-2009-1929

Description

Heap-based buffer overflow in the Microsoft Terminal Services Client ActiveX control running RDP 6.1 on Windows XP SP2, Vista SP1 or SP2, or Server 2008 Gold or SP2; or 5.2 or 6.1 on Windows XP SP3; allows remote attackers to execute arbitrary code via unspecified parameters to unknown methods, aka "Remote Desktop Connection ActiveX Control Heap Overflow Vulnerability."

POC

Reference

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-044

Github

• https://github.com/Farrhouq/Inpt-report