CVE-2009-1923: Buffer Overflow
Heap-based buffer overflow in the Windows Internet Name Service (WINS) component for Microsoft Windows 2000 SP4 and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted WINS replication packet that triggers an incorrect buffer-length calculation, aka "WINS Heap Overflow Vulnerability."
Affected Software
Event History
Frequently Asked Questions
Which systems are exposed to this issue?
The affected systems are Microsoft Windows 2000 SP4 and Microsoft Windows Server 2003 SP2 systems with the Windows Internet Name Service (WINS) component. Systems not running those listed operating system versions are not identified as affected by the provided data.
What does an attacker need to exploit the vulnerability?
An attacker can exploit the issue remotely without authentication by sending a crafted WINS replication packet. Successful exploitation can result in arbitrary code execution.
What security impact can successful exploitation have?
The listed CVSS vector indicates complete impact to confidentiality, integrity, and availability. This means a successful attacker could potentially access or disclose data, alter data, and disrupt the affected system.