CVE-2009-2493

Published: Jul 29, 2009Modified: May 27, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2; does not properly restrict use of OleLoadFromStream in instantiating objects from data streams, which allows remote attackers to execute arbitrary code via a crafted HTML document with an ATL (1) component or (2) control, related to ATL headers and bypassing security policies, aka "ATL COM Initialization Vulnerability."

Affected (16)

Products: Microsoft: Visual C++, Windows 2000, Windows 2003 Server, Windows Server 2008, Windows Vista, Windows Xp, Visual Studio

7 products

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Microsoft Visual C++	Version 2005 sp1
Microsoft Visual C++	Version 2008
Microsoft Visual C++	Version 2008 sp1

Configuration B

9 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 2000	All versions
Microsoft Windows 2003 Server	All versions
Microsoft Windows Server 2008	All versions
Microsoft Windows Server 2008	All versions
Microsoft Windows Vista	All versions
Microsoft Windows Vista	All versions
Microsoft Windows Vista	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions

Configuration C

4 vulnerable

Vulnerable Software	Affected Versions
Microsoft Visual Studio	Version 2003 sp1
Microsoft Visual Studio	Version 2005 sp1
Microsoft Visual Studio	Version 2008
Microsoft Visual Studio	Version 2008 sp1

Related CWEs

CWE-264

CWE-94

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (72)

http://blogs.technet.com/srd/archive/2009/08/11/ms09-037-why-we-are-using-cve-s-already-used-in-ms09-035.aspx

Source: secure@microsoft.com

Broken Link

http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html

Source: secure@microsoft.com

Third Party Advisory

http://marc.info/?l=bugtraq&m=126592505426855&w=2

Source: secure@microsoft.com

Third Party Advisory

http://secunia.com/advisories/35967

Source: secure@microsoft.com

http://secunia.com/advisories/36187

Source: secure@microsoft.com

http://secunia.com/advisories/36374

Source: secure@microsoft.com

http://secunia.com/advisories/36746

Source: secure@microsoft.com

http://secunia.com/advisories/38568

Source: secure@microsoft.com

http://secunia.com/advisories/41818

Source: secure@microsoft.com

http://sunsolve.sun.com/search/document.do?assetkey=1-66-264648-1

Source: secure@microsoft.com

Broken Link

http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1

Source: secure@microsoft.com

Broken Link

http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020775.1-1

Source: secure@microsoft.com

Broken Link

http://www.adobe.com/support/security/advisories/apsa09-04.html

Source: secure@microsoft.com

PatchThird Party Advisory

http://www.adobe.com/support/security/bulletins/apsb09-10.html

Source: secure@microsoft.com

Third Party Advisory

http://www.adobe.com/support/security/bulletins/apsb09-11.html

Source: secure@microsoft.com

PatchThird Party Advisory

http://www.adobe.com/support/security/bulletins/apsb09-13.html

Source: secure@microsoft.com

Third Party Advisory

http://www.novell.com/support/viewContent.do?externalId=7004997&sliceId=1

Source: secure@microsoft.com

Third Party Advisory

http://www.openoffice.org/security/cves/CVE-2009-2493.html

Source: secure@microsoft.com

Third Party Advisory

http://www.us-cert.gov/cas/techalerts/TA09-195A.html

Source: secure@microsoft.com

Third Party AdvisoryUS Government Resource

http://www.us-cert.gov/cas/techalerts/TA09-223A.html

Source: secure@microsoft.com

Third Party AdvisoryUS Government Resource

http://www.us-cert.gov/cas/techalerts/TA09-286A.html

Source: secure@microsoft.com

Third Party AdvisoryUS Government Resource

http://www.us-cert.gov/cas/techalerts/TA09-342A.html

Source: secure@microsoft.com

Third Party AdvisoryUS Government Resource

http://www.vupen.com/english/advisories/2009/2034

Source: secure@microsoft.com

http://www.vupen.com/english/advisories/2009/2232

Source: secure@microsoft.com

http://www.vupen.com/english/advisories/2010/0366

Source: secure@microsoft.com

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-035

Source: secure@microsoft.com

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-037

Source: secure@microsoft.com

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-055

Source: secure@microsoft.com

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-060

Source: secure@microsoft.com

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-072

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6245

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6304

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6421

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6473

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6621

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6716

Source: secure@microsoft.com

http://blogs.technet.com/srd/archive/2009/08/11/ms09-037-why-we-are-using-cve-s-already-used-in-ms09-035.aspx