PT-2009-3491 · Microsoft · Windows+4

David Dewey · Published 2009-07-29 · Updated 2026-05-27 · CVE-2009-0901

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Visual Studio .NET versions 2003 SP1 through 2008 Microsoft Visual C++ versions 2005 SP1 through 2008 SP1 Windows versions 2000 SP4 through XP SP3, Server 2003 SP2, Vista Gold through SP2, and Server 2008 Gold through SP2

Description A remote code execution issue exists due to an error in the Active Template Library (ATL) headers, which could allow an attacker to execute arbitrary code via a malformed stream to an ATL component or control. This is related to the ATL not preventing VariantClear calls on an uninitialized VARIANT. The issue could be exploited by a remote, unauthenticated user by constructing a specially crafted Web page, potentially allowing remote code execution on an affected system.

Recommendations For Microsoft Visual Studio .NET versions 2003 SP1 through 2008, update to a version that includes the fix for this issue. For Microsoft Visual C++ versions 2005 SP1 through 2008 SP1, update to a version that includes the fix for this issue. For Windows versions 2000 SP4 through XP SP3, Server 2003 SP2, Vista Gold through SP2, and Server 2008 Gold through SP2, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to components and controls built using Visual Studio ATL until a patch is available.

Fix

RCE

Code Injection

Weakness Enumeration

CWE-457

CWE-94

Related Identifiers

CVE-2009-0901

Affected Products

Active Template Library

Visual C++

Visual Studio .Net

Outlook

Windows

References · 29

• https://nvd.nist.gov/vuln/detail/CVE-2009-0901 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-060 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-037 · Vendor Advisory
• http://securityfocus.com/bid/35832 · Patch
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1 · Vendor Advisory
• http://adobe.com/support/security/bulletins/apsb09-11.html · Patch
• http://marc.info/?l=bugtraq&m=126592505426855&w=2 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-035 · Vendor Advisory
• http://adobe.com/support/security/advisories/apsa09-04.html · Patch
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0901 · Security Note
• http://secunia.com/advisories/35967 · Note
• http://secunia.com/advisories/36187 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6289 · Note
• http://secunia.com/advisories/36746 · Note
• http://us-cert.gov/cas/techalerts/TA09-223A.html · Note