Vulnerability Name:

CVE-2009-1923 (CCN-52109)

Assigned:2009-08-11
Published:2009-08-11
Updated:2019-04-30
Summary:Heap-based buffer overflow in the Windows Internet Name Service (WINS) component for Microsoft Windows 2000 SP4 and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted WINS replication packet that triggers an incorrect buffer-length calculation, aka "WINS Heap Overflow Vulnerability."
CVSS v3 Severity:10.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Changed
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
CVSS v2 Severity:9.3 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)
6.9 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
10.0 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)
7.4 High (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
Vulnerability Type:CWE-119
Vulnerability Consequences:Gain Access
References:Source: MITRE
Type: CNA
CVE-2009-1923

Source: CCN
Type: SA36213
Microsoft Windows WINS Service Two Vulnerabilities

Source: CCN
Type: IBM Internet Security Systems Protection Alert
Microsoft WINS Replication Remote Code Execution

Source: CCN
Type: Microsoft Security Bulletin MS09-039
Vulnerabilities in WINS Could Allow Remote Code Execution (969883)

Source: CCN
Type: Microsoft Security Bulletin MS11-035
Vulnerability in WINS Could Allow Remote Code Execution (2524426)

Source: CCN
Type: Microsoft Security Bulletin MS11-070
Vulnerability in WINS Could Allow Elevation of Privilege (2571621)

Source: CCN
Type: BID-35980
Microsoft Windows WINS Server Network Packet Remote Heap Buffer Overflow Vulnerability

Source: CERT
Type: US Government Resource
TA09-223A

Source: MS
Type: UNKNOWN
MS09-039

Source: XF
Type: UNKNOWN
windows-wins-replication-bo(52109)

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:6410

Source: CCN
Type: ZDI-09-053
Microsoft Windows WINS Service Heap Overflow Vulnerability

Vulnerable Configuration:Configuration 1:
  • cpe:/o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*
  • OR cpe:/o:microsoft:windows_2003_server:-:sp2:*:*:*:*:*:*
  • OR cpe:/o:microsoft:windows_2003_server:-:sp2:itanium:*:*:*:*:*
  • OR cpe:/o:microsoft:windows_2003_server:-:sp2:x64:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*
  • OR cpe:/o:microsoft:windows:server_2003:sp2:*:*:*:*:*:*
  • OR cpe:/o:microsoft:windows:server_2003:sp2:itanium:*:*:*:*:*
  • OR cpe:/o:microsoft:windows:server_2003:sp2:x64:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.mitre.oval:def:6410
    V
    		WINS Heap Overflow Vulnerability
    2009-09-28
    BACK
    microsoft windows 2000 * sp4
    microsoft windows 2003 server - sp2
    microsoft windows 2003 server - sp2
    microsoft windows 2003 server - sp2
    microsoft windows 2000 - sp4
    microsoft windows server_2003 sp2
    microsoft windows server_2003 sp2
    microsoft windows server_2003 sp2