{"cvss":0.0,"datePublished":"2009-08-18T00:00:00Z","dateUpdated":"2009-08-18T00:00:00Z","description":"Heap-based buffer overflow in the Windows Internet Name Service (WINS) component for Microsoft Windows 2000 SP4 and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted WINS replication packet that triggers an incorrect buffer-length calculation, aka \"WINS Heap Overflow Vulnerability.\"","dueDate":"","id":"CVE-2009-1923","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"Windows","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"Microsoft Windows Improper Restriction of Operations within the Bounds of a Memory Buffer","vendor":"Microsoft"}