Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:visual_studio:2003:sp1:*:*:*:*:*:*

part: a version: 2003 update: sp1

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductVisual Studio (aeafcbc5-ae90-5076-b87e-4062acc6a96b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-2493 vulnerable 2026-06-08 04:51:28.931918 Details available
The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2; does not properly restrict use of OleLoadFromStream in instantiating objects from data streams, which allows remote attackers to execute arbitrary code via a crafted HTML document with an ATL (1) component or (2) control, related to ATL headers and bypassing security policies, aka "ATL COM Initialization Vulnerability."
Published: 2009-07-29T17:00:00.000Z
Updated: 2026-05-27T15:47:17.589Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.