CVE:CVE-2009-1929
CNNVD:CNNVD-200908-138
Microsoft Terminal Services Client ActiveX 控件在Windows XP SP2，Vista SP1 或 SP2， 又或 Server 2008 Gold 或 SP2上的 RDP 6.1， ; 或Windows XP SP3上的 5.2 或 6.1中存在的基于堆缓冲区溢出漏洞会允许远程攻击者通过对未明方法函数的未名参数来执行任意代码，改漏洞又称作 "远程桌面连接ActiveX控件堆溢出漏洞"。
solution:Upgrade microsoft windows_2003_server to a higher version than sp2,and avoid the version sp2; Upgrade microsoft windows_server_2008 to a higher version than *,*:sp2,-,-:sp2,and avoid the version *:sp2,-:sp2; Upgrade microsoft windows_vista to a higher version than *:sp1,*:sp2,-,and avoid the version *:sp1,*:sp2; Upgrade microsoft windows_xp to a higher version than *:sp2,-:sp2,-:sp3,and avoid the version *:sp2,-:sp2,-:sp3