CVE-2009-1929: Microsoft Windows 2003 Server

High severity, CVSS 9.3. EPSS: 34.5% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the Microsoft Terminal Services Client ActiveX control running RDP 6.1 on Windows XP SP2, Vista SP1 or SP2, or Server 2008 Gold or SP2; or 5.2 or 6.1 on Windows XP SP3; allows remote attackers to execute arbitrary code via unspecified parameters to unknown methods, aka "Remote Desktop Connection ActiveX Control Heap Overflow Vulnerability."

Affected products

• Microsoft Windows 2003 Server: version sp2 only
• Microsoft Windows Server 2008: any version; affected versions not specified
• Microsoft Windows Vista: any version; affected versions not specified
• Microsoft Windows XP: any version; affected versions not specified

Published 2009-08-12. Last modified 2026-06-16.