CVE-2009-0230

CriticalCVSS 9.0/10Last modified Jun 16, 2026

Description

The Windows Print Spooler in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows remote authenticated users to gain privileges via a crafted RPC message that triggers loading of a DLL file from an arbitrary directory, aka "Print Spooler Load Library Vulnerability."

Metrics

CVSS 2.0 9.0/10AV:N/AC:L/Au:S/C:C/I:C/A:C

Weakness enumeration

CWE-264

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://osvdb.org/54934Broken Link
http://secunia.com/advisories/35365Third Party Advisory
http://support.avaya.com/elmodocs2/security/ASA-2009-217.htmThird Party Advisory
http://www.securityfocus.com/bid/35209Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1022352Third Party Advisory, VDB Entry
http://www.us-cert.gov/cas/techalerts/TA09-160A.htmlThird Party Advisory, US Government Resource
http://www.vupen.com/english/advisories/2009/1541Third Party Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-022
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6287Third Party Advisory
http://osvdb.org/54934Broken Link
http://secunia.com/advisories/35365Third Party Advisory
http://support.avaya.com/elmodocs2/security/ASA-2009-217.htmThird Party Advisory
http://www.securityfocus.com/bid/35209Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1022352Third Party Advisory, VDB Entry
http://www.us-cert.gov/cas/techalerts/TA09-160A.htmlThird Party Advisory, US Government Resource
http://www.vupen.com/english/advisories/2009/1541Third Party Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-022
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6287Third Party Advisory

Timeline

Published: Jun 10, 2009
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2009

CVE-2009-02318.8The Embedded OpenType (EOT) Font Engine (T2EMBED.DLL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and S CVE-2009-02329.3Integer overflow in the Embedded OpenType (EOT) Font Engine in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1,CVE-2009-02335.8The DNS Resolver Cache Service (aka DNSCache) in Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008,CVE-2009-02346.4The DNS Resolver Cache Service (aka DNSCache) in Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 CVE-2009-02359.3Stack-based buffer overflow in the Word 97 text converter in WordPad in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and CVE-2009-02374.3Cross-site scripting (XSS) vulnerability in cookieauth.dll in the HTML forms authentication component in Microsoft Forefront Threat Manageme CVE-2009-02388.8Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Compatibility Pack for Word CVE-2009-02394.3Cross-site scripting (XSS) vulnerability in Windows Search 4.0 for Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows user-assisted CVE-2009-02403.5listing.php in WebSVN 2.0 and possibly 1.7 beta, when using an SVN authz file, allows remote authenticated users to read changelogs or diffs CVE-2009-02417.5Stack-based buffer overflow in the process_path function in gmetad/server.c in Ganglia 3.1.1 allows remote attackers to cause a denial of se CVE-2009-02437.2Microsoft Windows does not properly enforce the Autorun and NoDriveTypeAutoRun registry values, which allows physically proximate attackers CVE-2009-02448.8Directory traversal vulnerability in the OBEX FTP Service in the Microsoft Bluetooth stack in Windows Mobile 6 Professional, and probably Wi