CVE-2009-0230

Severity: critical (CVSS 9.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 34.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-06-10 · updated 2026-06-16
Weakness: CWE-264

Description

The Windows Print Spooler in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows remote authenticated users to gain privileges via a crafted RPC message that triggers loading of a DLL file from an arbitrary directory, aka "Print Spooler Load Library Vulnerability."

Affected products

Microsoft Windows 2000: all versions
Microsoft Windows 2003 Server: all versions
Microsoft Windows Server: 2008
Microsoft Windows Server 2008: all versions
Microsoft Windows Vista: all versions
Microsoft Windows XP Service Pack 3: all versions

References

http://osvdb.org/54934
http://secunia.com/advisories/35365
http://support.avaya.com/elmodocs2/security/ASA-2009-217.htm
http://www.securityfocus.com/bid/35209
http://www.securitytracker.com/id?1022352
http://www.us-cert.gov/cas/techalerts/TA09-160A.html
http://www.vupen.com/english/advisories/2009/1541
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-022
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6287
http://osvdb.org/54934
http://secunia.com/advisories/35365
http://support.avaya.com/elmodocs2/security/ASA-2009-217.htm

Get alerted when CVE-2009-0230 or the next vulnerability affects your stack