PT-2009-4902 · Microsoft · Active Template Library+3

Ryan Smith · Published 2009-07-29 · Updated 2026-05-27 · CVE-2009-2495

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Visual Studio .NET versions 2003 SP1 through 2008 SP1 Visual C++ versions 2005 SP1 through 2008 SP1

Description The issue is related to the Active Template Library (ATL) in Microsoft Visual Studio, which does not properly enforce string termination. This allows remote attackers to obtain sensitive information via a crafted HTML document with an ATL component or control that triggers a buffer over-read. The vulnerability could be exploited to disclose information in memory by manipulating a string to read extra data beyond its end. An attacker could run a malicious component or control to disclose information, forward user data to a third party, or access data on affected systems that is accessible to the logged-on user.

Recommendations For Microsoft Visual Studio .NET versions 2003 SP1 through 2008 SP1, consider disabling the use of ATL components and controls until a patch is available. For Visual C++ versions 2005 SP1 through 2008 SP1, restrict access to ATL headers and buffer allocation functions to minimize the risk of exploitation. As a temporary workaround, avoid using ATL components and controls in crafted HTML documents until the issue is resolved.

Fix

Buffer Over-read

Information Disclosure

Weakness Enumeration

CWE-126

CWE-200

Related Identifiers

CVE-2009-2495

Affected Products

Active Template Library

Visual Studio

Outlook

Visual C++

References · 20

• https://nvd.nist.gov/vuln/detail/CVE-2009-2495 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-060 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-035 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2495 · Security Note
• http://marc.info/?l=bugtraq&m=126592505426855&w=2 · Vendor Advisory
• https://t.me/cveNotify/164883 · Telegram Post
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6478 · Note
• http://secunia.com/advisories/35967 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7573 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6305 · Note
• http://us-cert.gov/cas/techalerts/TA09-286A.html · Note
• http://secunia.com/advisories/36746 · Note
• http://secunia.com/advisories/36374 · Note
• http://adobe.com/support/security/bulletins/apsb09-13.html · Note