CVE-2009-2507

🗓️ 14 Oct 2009 10:00:00Reported by microsoftType

A certain ActiveX control in the Indexing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly process URLs, allowing remote attackers to execute arbitrary programs

Reporter	Title	Published	Views	Family All 12
Check Point Advisories	Microsoft Indexing Service ActiveX Memory Corruption (MS09-057; CVE-2009-2507)	13 Oct 200900:00	–	checkpoint_advisories
Check Point Advisories	Microsoft Indexing Service ActiveX Memory Corruption (MS09-057) - Ver2 (CVE-2009-2507)	7 Jan 201400:00	–	checkpoint_advisories
Check Point Advisories	Microsoft Indexing Service Loop Counter Underwrap Code Execution - Ver2 (CVE-2009-2507)	3 Feb 201400:00	–	checkpoint_advisories
Cvelist	CVE-2009-2507	14 Oct 200910:00	–	cvelist
NVD	CVE-2009-2507	14 Oct 200910:30	–	nvd
OpenVAS	Microsoft Windows Indexing Service ActiveX Vulnerability (969059)	15 Oct 200900:00	–	openvas
OpenVAS	Microsoft Windows Indexing Service ActiveX Vulnerability (969059)	15 Oct 200900:00	–	openvas
Prion	Memory corruption	14 Oct 200910:30	–	prion
securityvulns	Microsoft Security Bulletin MS09-057 - Important Vulnerability in Indexing Service Could Allow Remote Code Execution (969059)	13 Oct 200900:00	–	securityvulns
securityvulns	Microsoft Windows Indexing Service ActiveX memory corruption	13 Oct 200900:00	–	securityvulns

NVD

Node

microsoft windows_2000sp4

microsoft windows_2003_serversp2

microsoft windows_2003_serversp2itanium

microsoft windows_2003_serversp2x64

microsoft windows_xpsp2

microsoft windows_xpsp3

microsoft windows_xpMatch-sp2x64

Source	Link
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6042
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-057
us-cert	www.us-cert.gov/cas/techalerts/TA09-286A.html

23 Apr 2026 00:35Current

7.1High risk

Vulners AI Score7.1

CVSS 29.3

EPSS0.37765