(HP Issues Advisory for ProLiant Support) Microsoft Visual Studio Active Template Library Bugs Let Remote Users Execute Arbitrary Code
|
|
SecurityTracker Alert ID: 1023582 |
|
SecurityTracker URL: http://securitytracker.com/id/1023582
|
|
CVE Reference:
CVE-2009-0901, CVE-2009-2493, CVE-2009-2495
(Links to External Site)
|
Date: Feb 11 2010
|
Impact:
Disclosure of system information, Disclosure of user information, Execution of arbitrary code via network, User access via network
|
Fix Available: Yes Vendor Confirmed: Yes
|
|
Description:
Several vulnerabilities were reported in Microsoft Visual Studio. A remote user can cause arbitrary code to be executed on the target user's system. HP ProLiant Support is affected.
A remote user can create a specially crafted file that, when loaded by the target user, will trigger a flaw in the Microsoft Active Template Library (ATL) and execute arbitrary code on the target system. The code will run with the privileges of the target user.
A specially crafted ATL header can cause the VariantClear() function to be called on an incorrectly initialized VARIANT [CVE-2009-0901].
A specially crafted ATL header can invoke OleLoadFromStream() to instantiate arbitrary objects that can bypass related security policy [CVE-2009-2493].
A specially crafted string without a terminating NULL character may allow a remote user to obtain potentially sensitive information [CVE-2009-2495].
David Dewey of IBM ISS X-Force reported one of the vulnerabilities. Ryan Smith of VeriSign iDefense Labs reported the other two vulnerabilities.
|
Impact:
A remote user can create HTML that, when loaded by the target user, will execute arbitrary code on the target user's system or access potentially sensitive information on the target user's system.
|
Solution:
HP has issued an advisory for HP ProLiant Support Pack for Windows, which is affected by these vulnerabilities. The HP software installs a vulnerable version of Microsoft Visual C++. HP recommends that customers that have installed HP ProLiant Support Pack 8.30 for Windows subsequently install Microsoft patches KB973923 and KB973924.
The HP advisory is available at:
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01997644
|
Vendor URL: www.microsoft.com/technet/security/bulletin/ms09-035.mspx (Links to External Site)
|
Cause:
Access control error
|
Underlying OS:
Windows (Any)
|
|
Message History:
This archive entry is a follow-up to the message listed below.
|
Source Message Contents
|
Date: Thu, 11 Feb 2010 20:16:35 +0000
Subject: HP Proliant
|
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01997644
CVE-2009-0901, CVE-2009-2493, CVE-2009-2495, MS09-035
|
|
