NVD

Id
48215  
Name
CVE-2009-0901  
Description
The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2; does not prevent VariantClear calls on an uninitialized VARIANT, which allows remote attackers to execute arbitrary code via a malformed stream to an ATL (1) component or (2) control, related to ATL headers and error handling, aka "ATL Uninitialized Object Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-07-29  
Modified Date
2014-11-13  
Seq
2009-0901  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
242312 48215 CVE-2009-0901 http://blogs.technet.com/srd/archive/2009/08/11/ms09-037-why-we-are-using-cve-s-already-used-in-ms09-035.aspx  View
242313 48215 CVE-2009-0901 SSRT100013  View
242314 48215 CVE-2009-0901 oval:org.mitre.oval:def:6289  View
242315 48215 CVE-2009-0901 oval:org.mitre.oval:def:6311  View
242316 48215 CVE-2009-0901 oval:org.mitre.oval:def:6373  View
242317 48215 CVE-2009-0901 oval:org.mitre.oval:def:7581  View
242318 48215 CVE-2009-0901 266108  View
242319 48215 CVE-2009-0901 http://www.adobe.com/support/security/advisories/apsa09-04.html  View
242320 48215 CVE-2009-0901 http://www.adobe.com/support/security/bulletins/apsb09-10.html  View
242321 48215 CVE-2009-0901 http://www.adobe.com/support/security/bulletins/apsb09-11.html  View
242322 48215 CVE-2009-0901 http://www.adobe.com/support/security/bulletins/apsb09-13.html  View
242323 48215 CVE-2009-0901 MS09-035  View
242324 48215 CVE-2009-0901 MS09-037  View
242325 48215 CVE-2009-0901 MS09-060  View
242326 48215 CVE-2009-0901 http://www.novell.com/support/viewContent.do?externalId=7004997&sliceId=1  View
242327 48215 CVE-2009-0901 35832  View
242328 48215 CVE-2009-0901 TA09-195A  View
242329 48215 CVE-2009-0901 TA09-223A  View
242330 48215 CVE-2009-0901 TA09-286A  View
242331 48215 CVE-2009-0901 ADV-2009-2034  View
242332 48215 CVE-2009-0901 ADV-2009-2232  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40942 JVNDB-2009-001948 Microsoft Visual Studio の ATL における未初期化オブジェクト処理に関する任意のコードを実行される脆弱性 Microsoft Visual Studio の Active Template Library (ATL) には、初期化されていない VARIANT の VariantClear 呼び出しを抑止しないため、任意のコードを実行される脆弱性が存在します。 CVE-2009-0901 38332 CVE-2009-0901 48215 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001948.html 2009-07-28 2011-01-14 View