AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2009-1923

HIGH · CVSS 9.3 EPSS 24.66%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2009-08-12 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2009-1923
Severity
HIGH
CVSS
9.3
EPSS
24.66%
Microsoft Windows

Original NVD Description

Heap-based buffer overflow in the Windows Internet Name Service (WINS) component for Microsoft Windows 2000 SP4 and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted WINS replication packet that triggers an incorrect buffer-length calculation, aka "WINS Heap Overflow Vulnerability."