VDB
CVE-2009-2493
CVE-2009-2493
PUBLISHED
Les composants ActiveX construits avec des versions vulnérables de la bibliothèque ATL permettent à un utilisateur malveillant d'exécuter du code arbitraire à distance.
EPSS 37.90% · 98.4th percentile
Risk Scores
EPSS Score
37.90%
98.4th percentile
Timeline
- Jul 29, 2009 CVE Published
- Nov 4, 2009 VulnCheck KEV Exploitation
- Sep 23, 2014 PoC Published
- Feb 4, 2022 EPSS Score
- Apr 19, 2022 EPSS Score
- Jun 23, 2022 EPSS Score
- Jul 17, 2022 EPSS Score
- Jul 18, 2022 EPSS Score
- Aug 27, 2022 EPSS Score
- Oct 29, 2022 EPSS Score
- Dec 30, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
References
- https://cert.ssi.gouv.fr/avis/CERTA-2009-AVI-325/ advisory
- http://www.microsoft.com/technet/security/Bulletin/MS09-037.mspx advisory
- https://cert.ssi.gouv.fr/avis/CERTA-2009-AVI-516/ advisory
- https://cert.ssi.gouv.fr/avis/CERTA-2009-AVI-300/ advisory
- http://www.microsoft.com/technet/security/Bulletin/MS09-035.mspx advisory
- https://cert.ssi.gouv.fr/avis/CERTA-2009-AVI-435/ advisory
- http://www.microsoft.com/technet/security/Bulletin/MS09-055.mspx advisory
- https://cert.ssi.gouv.fr/avis/CERTA-2009-AVI-440/ advisory
- http://www.microsoft.com/technet/security/Bulletin/MS09-060.mspx advisory
- https://cert.ssi.gouv.fr/avis/CERTA-2010-AVI-083/ advisory
- http://itrc.hp.com/service/cki/docDisplay.do?docId=c01997644 advisory
- https://cert.ssi.gouv.fr/avis/CERTA-2009-AVI-538/ advisory
- http://www.microsoft.com/technet/security/Bulletin/MS09-072.mspx advisory
- https://cert.ssi.gouv.fr/avis/CERTA-2010-AVI-080/ advisory