CVE

Id
39930  
CVE No.
CVE-2009-2495  
Status
Candidate  
Description
The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1 does not properly enforce string termination, which allows remote attackers to obtain sensitive information via a crafted HTML document with an ATL (1) component or (2) control that triggers a buffer over-read, related to ATL headers and buffer allocation, aka "ATL Null String Vulnerability."  
Phase
Assigned (20090717)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
438900 39930 CVE-2009-2495 CONFIRM:http://www.adobe.com/support/security/bulletins/apsb09-13.html  View
438901 39930 CVE-2009-2495 CONFIRM:http://www.adobe.com/support/security/bulletins/apsb09-10.html  View
438902 39930 CVE-2009-2495 CONFIRM:http://www.novell.com/support/viewContent.do?externalId=7004997&sliceId=1  View
438903 39930 CVE-2009-2495 HP:HPSBMA02488  View
438904 39930 CVE-2009-2495 URL:http://marc.info/?l=bugtraq&m=126592505426855&w=2  View
438905 39930 CVE-2009-2495 HP:SSRT100013  View
438906 39930 CVE-2009-2495 URL:http://marc.info/?l=bugtraq&m=126592505426855&w=2  View
438907 39930 CVE-2009-2495 MS:MS09-035  View
438908 39930 CVE-2009-2495 URL:http://www.microsoft.com/technet/security/Bulletin/MS09-035.mspx  View
438909 39930 CVE-2009-2495 MS:MS09-060  View
438910 39930 CVE-2009-2495 URL:http://www.microsoft.com/technet/security/Bulletin/MS09-060.mspx  View
438911 39930 CVE-2009-2495 SUNALERT:266108  View
438912 39930 CVE-2009-2495 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1  View
438913 39930 CVE-2009-2495 CERT:TA09-195A  View
438914 39930 CVE-2009-2495 URL:http://www.us-cert.gov/cas/techalerts/TA09-195A.html  View
438915 39930 CVE-2009-2495 CERT:TA09-286A  View
438916 39930 CVE-2009-2495 URL:http://www.us-cert.gov/cas/techalerts/TA09-286A.html  View
438917 39930 CVE-2009-2495 OVAL:oval:org.mitre.oval:def:6305  View
438918 39930 CVE-2009-2495 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6305  View
438919 39930 CVE-2009-2495 OVAL:oval:org.mitre.oval:def:6478  View
438920 39930 CVE-2009-2495 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6478  View
438921 39930 CVE-2009-2495 OVAL:oval:org.mitre.oval:def:7573  View
438922 39930 CVE-2009-2495 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7573  View
438923 39930 CVE-2009-2495 SECUNIA:36374  View
438924 39930 CVE-2009-2495 URL:http://secunia.com/advisories/36374  View
438925 39930 CVE-2009-2495 SECUNIA:36746  View
438926 39930 CVE-2009-2495 URL:http://secunia.com/advisories/36746  View
438927 39930 CVE-2009-2495 SECUNIA:35967  View
438928 39930 CVE-2009-2495 URL:http://secunia.com/advisories/35967  View
438929 39930 CVE-2009-2495 VUPEN:ADV-2009-2034  View

Related JVN