CVE-2009-1929

CVE-2009-1929 describes a critical heap-based buffer overflow vulnerability in the Microsoft Terminal Services Client ActiveX control, affecting various Windows operating systems including XP, Vista, and Server 2008. This flaw allows unauthenticated remote attackers to execute arbitrary code on a vulnerable system by manipulating unspecified parameters within unknown methods. With a CVSS score of 9.3, it presents a high risk due to its network-based attack vector, medium attack complexity, and complete compromise of confidentiality, integrity, and availability. Despite its severity and high EPSS score, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.