https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 00:50:15 +0000 https://cve.radiocsirt.org/vuln/certa-2009-avi-300 certa-2009-avi-300 https://cve.radiocsirt.org/vuln/certa-2009-avi-300 https://cve.radiocsirt.org/vuln/euvd-2026-322127 EUVD-2026-322127 https://cve.radiocsirt.org/vuln/euvd-2026-322127 https://cve.radiocsirt.org/vuln/fkie_cve-2009-2495 <p>The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1 does not properly enforce string termination, which allows remote attackers to obtain sensitive information via a crafted HTML document with an ATL (1) component or (2) control that triggers a buffer over-read, related to ATL headers and buffer allocation, aka &#34;ATL Null String Vulnerability.&#34;</p> <p>The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1 does not properly enforce string termination, which allows remote attackers to obtain sensitive information via a crafted HTML document with an ATL (1) component or (2) control that triggers a buffer over-read, related to ATL headers and buffer allocation, aka &#34;ATL Null String Vulnerability.&#34;</p> https://cve.radiocsirt.org/vuln/fkie_cve-2009-2495 https://cve.radiocsirt.org/vuln/ghsa-w98q-7wf3-vg43 <p>The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1 does not properly enforce string termination, which allows remote attackers to obtain sensitive information via a crafted HTML document with an ATL (1) component or (2) control that triggers a buffer over-read, related to ATL headers and buffer allocation, aka &#34;ATL Null String Vulnerability.&#34;</p> <p>The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1 does not properly enforce string termination, which allows remote attackers to obtain sensitive information via a crafted HTML document with an ATL (1) component or (2) control that triggers a buffer over-read, related to ATL headers and buffer allocation, aka &#34;ATL Null String Vulnerability.&#34;</p> https://cve.radiocsirt.org/vuln/ghsa-w98q-7wf3-vg43 https://cve.radiocsirt.org/vuln/gsd-2009-2495 gsd-2009-2495 https://cve.radiocsirt.org/vuln/gsd-2009-2495