Remote Code Execution in Microsoft Visual Studio Components and Windows OS
CVE-2009-0901
Currently unrated
Key Information:
- Vendor
Microsoft
- Vendor
- CVE Published:
- 29 July 2009
What is CVE-2009-0901?
A vulnerability exists in the Active Template Library (ATL) of Microsoft Visual Studio and Windows operating systems. This issue arises due to the failure to adequately handle calls to VariantClear on an uninitialized VARIANT. Malicious actors could exploit this flaw by sending a malformed data stream to an ATL component or control, which may lead to the execution of arbitrary code on the vulnerable system. Such exploits can compromise user data and further extend the attack to other networked systems.