CVE-2009-2517: Microsoft Windows Server 2003

Medium severity, CVSS 4.9. EPSS: 1.8% chance of exploitation in the next 30 days.

The kernel in Microsoft Windows Server 2003 SP2 does not properly handle unspecified exceptions when an error condition occurs, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Exception Handler Vulnerability."

Affected products

Published 2009-10-14. Last modified 2026-06-16.