CVE-2009-0568

CRITICAL 10.0CVE-2009-0568 · Published 10/06/2009 · updated 16/06/2026

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

The RPC Marshalling Engine (aka NDR) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly maintain its internal state, which allows remote attackers to overwrite arbitrary memory locations via a crafted RPC message that triggers incorrect pointer reading, related to "IDL interfaces containing a non-conformant varying array" and FC_SMVARRAY, FC_LGVARRAY, FC_VARIABLE_REPEAT, and FC_VARIABLE_OFFSET, aka "RPC Marshalling Engine Vulnerability."

References

blogs.technet.com/srd/archive/2009/06/09/ms09-026-how-a-developer-can-know-if-their-rpc-interface-is-affected.aspx · Vendor Advisory
osvdb.org/54936 · Broken Link
securityfocus.com/bid/35219 · Third Party Advisory
securitytracker.com/id · Third Party Advisory
us-cert.gov/cas/techalerts/TA09-160A.html · Third Party Advisory
vupen.com/english/advisories/2009/1545 · Third Party Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-026
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6227 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free