NVD

Id
49738  
Name
CVE-2009-2493  
Description
The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2; does not properly restrict use of OleLoadFromStream in instantiating objects from data streams, which allows remote attackers to execute arbitrary code via a crafted HTML document with an ATL (1) component or (2) control, related to ATL headers and bypassing security policies, aka "ATL COM Initialization Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-07-29  
Modified Date
2016-09-02  
Seq
2009-2493  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
251519 49738 CVE-2009-2493 http://blogs.technet.com/srd/archive/2009/08/11/ms09-037-why-we-are-using-cve-s-already-used-in-ms09-035.aspx  View
251520 49738 CVE-2009-2493 SUSE-SA:2009:053  View
251521 49738 CVE-2009-2493 SSRT100013  View
251522 49738 CVE-2009-2493 oval:org.mitre.oval:def:6245  View
251523 49738 CVE-2009-2493 oval:org.mitre.oval:def:6304  View
251524 49738 CVE-2009-2493 oval:org.mitre.oval:def:6421  View
251525 49738 CVE-2009-2493 oval:org.mitre.oval:def:6473  View
251526 49738 CVE-2009-2493 oval:org.mitre.oval:def:6621  View
251527 49738 CVE-2009-2493 oval:org.mitre.oval:def:6716  View
251528 49738 CVE-2009-2493 264648  View
251529 49738 CVE-2009-2493 266108  View
251530 49738 CVE-2009-2493 1020775  View
251531 49738 CVE-2009-2493 http://www.adobe.com/support/security/advisories/apsa09-04.html  View
251532 49738 CVE-2009-2493 http://www.adobe.com/support/security/bulletins/apsb09-10.html  View
251533 49738 CVE-2009-2493 http://www.adobe.com/support/security/bulletins/apsb09-11.html  View
251534 49738 CVE-2009-2493 http://www.adobe.com/support/security/bulletins/apsb09-13.html  View
251535 49738 CVE-2009-2493 MS09-035  View
251536 49738 CVE-2009-2493 MS09-037  View
251537 49738 CVE-2009-2493 MS09-055  View
251538 49738 CVE-2009-2493 MS09-060  View
251539 49738 CVE-2009-2493 MS09-072  View
251540 49738 CVE-2009-2493 http://www.novell.com/support/viewContent.do?externalId=7004997&sliceId=1  View
251541 49738 CVE-2009-2493 http://www.openoffice.org/security/cves/CVE-2009-2493.html  View
251542 49738 CVE-2009-2493 TA09-195A  View
251543 49738 CVE-2009-2493 TA09-223A  View
251544 49738 CVE-2009-2493 TA09-286A  View
251545 49738 CVE-2009-2493 TA09-342A  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40943 JVNDB-2009-001949 Microsoft Visual Studio の ATL におけるオブジェクトのインスタンス化処理に関する任意のコードを実行される脆弱性 Microsoft Visual Studio の Active Template Library (ATL) には、データストリームからオブジェクトのインスタンス化処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2009-2493 39924 CVE-2009-2493 49738 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001949.html 2009-07-28 2011-01-14 View