OSVDB: The Open Source Vulnerability Database

Creditee: Ryan Smith

Known Contact Information:

(as of 2009-06-09)

Known Affiliations:

IBM ISS X-Force (as of 2007-12-11)
iDefense Labs (as of 2009-06-09)

Disclosed Vulnerabilities (8):

Disc. Date	OSVDB ID	CVEID	Title
2009-08-11	56910	2009-2494	Microsoft Visual Studio Active Template Library (ATL) Header Mismatch Remote Code Execution
2009-07-28	56698	2009-2493	Microsoft Visual Studio Active Template Library (ATL) Data Stream Object Instantiation Remote Code Execution
2009-07-28	56699	2009-2495	Microsoft Visual Studio Active Template Library (ATL) String Manipulation Arbitrary Memory Disclosure
2009-06-09	56113	2009-1856	Adobe Reader / Acrobat PDF File FlateDecode Filter Parameter Handling Unspecified Overflow
2008-02-12	41463	2007-0065	Microsoft Windows OLE Automation Unspecified Memory Corruption Remote Code Execution
2008-01-08	40069	2007-0066	Microsoft Windows TCP/IP ICMP RDP Packet Handling Remote DoS
2008-01-08	40070	2007-0069	Microsoft Windows TCP/IP IGMPv3 / MLDv2 Packet Handling Remote Code Execution
2007-12-11	39122	2007-0064	Microsoft Windows Media Format Runtime ASF Parsing Arbitrary Code Execution

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.