PT-2009-3491 · Microsoft · Windows+4

David Dewey · Publicado 2009-07-29 · Atualizado 2026-05-27 · CVE-2009-0901

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Visual Studio .NET versions 2003 SP1 through 2008 Microsoft Visual C++ versions 2005 SP1 through 2008 SP1 Windows versions 2000 SP4 through XP SP3, Server 2003 SP2, Vista Gold through SP2, and Server 2008 Gold through SP2

Description A remote code execution issue exists due to an error in the Active Template Library (ATL) headers, which could allow an attacker to execute arbitrary code via a malformed stream to an ATL component or control. This is related to the ATL not preventing VariantClear calls on an uninitialized VARIANT. The issue could be exploited by a remote, unauthenticated user by constructing a specially crafted Web page, potentially allowing remote code execution on an affected system.

Recommendations For Microsoft Visual Studio .NET versions 2003 SP1 through 2008, update to a version that includes the fix for this issue. For Microsoft Visual C++ versions 2005 SP1 through 2008 SP1, update to a version that includes the fix for this issue. For Windows versions 2000 SP4 through XP SP3, Server 2003 SP2, Vista Gold through SP2, and Server 2008 Gold through SP2, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to components and controls built using Visual Studio ATL until a patch is available.

Correção

RCE

Code Injection

Enumeração de Fraquezas

CWE-457

CWE-94

Identificadores relacionados

CVE-2009-0901

Produtos afetados

Active Template Library

Visual C++

Visual Studio .Net

Outlook

Windows

Referências · 29

• http://secunia.com/advisories/35967 · Nota
• http://secunia.com/advisories/36187 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-0901 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6289 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-060 · Aviso do Fabricante
• http://secunia.com/advisories/36746 · Nota
• http://us-cert.gov/cas/techalerts/TA09-223A.html · Nota
• https://docs.microsoft.com/security-updates/securitybulletins/2009/ms09-060 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6311 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-037 · Aviso do Fabricante
• http://us-cert.gov/cas/techalerts/TA09-286A.html · Nota
• http://securityfocus.com/bid/35832 · Correção
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1 · Aviso do Fabricante
• http://vupen.com/english/advisories/2009/2034 · Nota
• http://blogs.technet.com/srd/archive/2009/08/11/ms09-037-why-we-are-using-cve-s-already-used-in-ms09-035.aspx · Nota