CVE-2009-1924: Microsoft Windows 2000

High severity, CVSS 9.3. EPSS: 8.8% chance of exploitation in the next 30 days.

Integer overflow in the Windows Internet Name Service (WINS) component for Microsoft Windows 2000 SP4 allows remote WINS replication partners to execute arbitrary code via crafted data structures in a packet, aka "WINS Integer Overflow Vulnerability."

Affected products

• Microsoft Windows 2000: any version
• Microsoft Windows 2003 Server: affected versions not specified

Published 2009-08-12. Last modified 2026-06-16.