Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1 does not properly enforce string termination, which allows remote attackers to obtain sensitive information via a crafted HTML document with an ATL (1) component or (2) control that triggers a buffer over-read, related to ATL headers and buffer allocation, aka "ATL Null String Vulnerability."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Visual Studio ATL空字符串信息泄露漏洞
Vulnerability Description
Microsoft Visual Studio是微软公司的开发工具套件系列产品，是一个基本完整的开发工具集，包括了软件整个生命周期中所需要的大部分工具 。 Visual Studio所编译的ATL库可能允许读取没有截止空字符的字符串。攻击者可以操控这个字符串越界读取额外的数据，泄露内存中的信息。这个漏洞仅直接影响安装了使用Visual Studio ATL所编译的组件和控件的系统。成功利用这个漏洞的攻击者可以运行恶意的组件或控件，导致泄漏信息、向第三方转发用户数据，或在受影响的系统上访问登录用户可访问的任
CVSS Information
N/A
Vulnerability Type
N/A