NVD

Id
49740  
Name
CVE-2009-2495  
Description
The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1 does not properly enforce string termination, which allows remote attackers to obtain sensitive information via a crafted HTML document with an ATL (1) component or (2) control that triggers a buffer over-read, related to ATL headers and buffer allocation, aka "ATL Null String Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-07  
Published
2009-07-29  
Modified Date
2015-11-27  
Seq
2009-2495  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
251553 49740 CVE-2009-2495 HPSBMA02488  View
251554 49740 CVE-2009-2495 oval:org.mitre.oval:def:6305  View
251555 49740 CVE-2009-2495 oval:org.mitre.oval:def:6478  View
251556 49740 CVE-2009-2495 oval:org.mitre.oval:def:7573  View
251557 49740 CVE-2009-2495 266108  View
251558 49740 CVE-2009-2495 http://www.adobe.com/support/security/bulletins/apsb09-10.html  View
251559 49740 CVE-2009-2495 http://www.adobe.com/support/security/bulletins/apsb09-13.html  View
251560 49740 CVE-2009-2495 MS09-035  View
251561 49740 CVE-2009-2495 MS09-060  View
251562 49740 CVE-2009-2495 http://www.novell.com/support/viewContent.do?externalId=7004997&sliceId=1  View
251563 49740 CVE-2009-2495 TA09-195A  View
251564 49740 CVE-2009-2495 TA09-286A  View
251565 49740 CVE-2009-2495 ADV-2009-2034  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40944 JVNDB-2009-001950 Microsoft Visual Studio の ATL における終端文字列の処理に関する重要な情報を取得される脆弱性 Microsoft Visual Studio の Active Template Library (ATL) には、終端の文字列を適切に処理しないため、重要な情報を取得される脆弱性が存在します。 CVE-2009-2495 39926 CVE-2009-2495 49740 7.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001950.html 2009-07-28 2011-01-14 View