CVE-2009-1138

CRITIQUE 10.0CVE-2009-1138 · Published 10/06/2009 · updated 16/06/2026

En bref

CVE-2009-1138 est une vulnérabilité CRITIQUE (CVSS 10.0).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 39.4%, plus élevée que 98.6% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

The LDAP service in Active Directory on Microsoft Windows 2000 SP4 does not properly free memory for LDAP and LDAPS requests, which allows remote attackers to execute arbitrary code via a request that uses hexadecimal encoding, whose associated memory is not released, related to a "DN AttributeValue," aka "Active Directory Invalid Free Vulnerability." NOTE: this issue is probably a memory leak.

References

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free