MS09-035: Vulnerabilities in Visual Studio Active Template Libraries could allow remote code execution

Article translations Article translations
Article ID: 969706 - View products that this article applies to.
Expand all | Collapse all

On This Page

INTRODUCTION

Microsoft has released security bulletin MS09-035. To view the complete security bulletin, visit one of the following Microsoft Web sites:

How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help protect your computer that is running Windows from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

MORE INFORMATION

Prerequisites

If you are running Windows Server 2003 Service Pack 2 (SP2), you must install update 973825 before you install this security update. For more information about update 973825, click the following article number to view the article in the Microsoft Knowledge Base:
973825 Error message when you try to install a large Windows Installer package or a large Windows Installer patch package in Windows Server 2003 Service Pack 2: "Error 1718 File was rejected by digital signature policy"

Additional information and known issues about this security update

For more information about this security update, click the following article number to view the article in the Microsoft Knowledge Base:
971089 Description of the update for Microsoft Visual Studio .NET 2003 Service Pack 1: July 28, 2009
971090 Description of the update for Microsoft Visual Studio 2005 Service Pack 1: July 28, 2009
971091 Description of the update for Microsoft Visual Studio 2008: July 28, 2009
971092 Description of the update for Microsoft Visual Studio 2008 Service Pack 1: July 28, 2009
973544 Description of the security update for Microsoft Visual C++ 2005 Service Pack 1 Redistributable Package: July 28, 2009
973552 Description of the security update for Microsoft Visual C++ 2008 Service Pack 1 Redistributable Package: July 28, 2009
973551 Description of the update for Microsoft Visual C++ 2008 Redistributable Package: July 28, 2009
973830 Description of the update for Microsoft Visual Studio 2005 Service Pack 1 64-bit Hosted Visual C++ Tools: July 28, 2009
973923 Description of the security update for the Microsoft Visual C++ 2005 Service Pack 1 Redistributable Package (for previously installed versions): July 28, 2009
973924 Description of the security update for the Microsoft Visual C++ 2008 Redistributable Package (for previously installed versions): July 28, 2009
973673 MS09-035: Description of the ATL for Smart Devices security update for Visual Studio 2005 Service Pack 1: August 11, 2009
973674 MS09-035: Description of the ATL for Smart Devices security update for Visual Studio 2008: August 11, 2009
973675 MS09-035: Description of the ATL for Smart Devices security update for Visual Studio 2008 Service Pack 1: August 11, 2009
974616 An update rollup is available for Windows Embedded CE 6.0 (December 2009)
For more information about any known issues with specific releases of this software, click the following article number to view the article in the Microsoft Knowledge Base:
974054 Symbol files (PDBs) are not updated after you install update 971090 or 973830 for Visual Studio 2005 Service Pack 1 or update 971089 for Visual Studio .NET 2003 Service Pack 1
974055 Some DLL files are not updated when you install update 971091 for Visual Studio 2008
973825 Error message when you try to install a large Windows Installer package or a large Windows Installer patch package in Windows Server 2003 Service Pack 2: "Error 1718 File was rejected by digital signature policy"
974479 You receive a compile error in your ATL project after you install the Windows SDK 6.1 with Visual Studio 2008 Service Pack 1

Additional affected products

In addition to the product versions that are specified in the "Applies to" section, this security update is meant to be used with the following products:
  • Microsoft Visual C++ 2008 Service Pack 1 Redistributable Package
  • Microsoft Visual C++ 2008 Redistributable Package
  • Microsoft Visual Studio 2005 Service Pack 1 64-bit Hosted Visual C++ Tools
  • Microsoft Visual C++ 2005 Service Pack 1 Redistributable Package

Properties

Article ID: 969706 - Last Review: May 9, 2012 - Revision: 8.0
APPLIES TO
  • Microsoft Visual Studio 2008 Service Pack 1, when used with:
    • Microsoft Visual Studio 2008 Professional Edition
    • Microsoft Visual Studio Team System 2008 Team Suite
    • Microsoft Visual Studio Team System 2008 Database Edition
    • Microsoft Visual Studio Team System 2008 Architecture Edition
    • Microsoft Visual Studio Team System 2008 Development Edition
    • Microsoft Visual Studio Team System 2008 Test Edition
  • Microsoft Visual Studio 2008 Standard Edition
  • Microsoft Visual Studio 2008 Academic Edition
  • Microsoft Visual Studio 2008 Professional Edition
  • Microsoft Visual Studio Team System 2008 Team Suite
  • Microsoft Visual Studio Team System 2008 Database Edition
  • Microsoft Visual Studio Team System 2008 Architecture Edition
  • Microsoft Visual Studio Team System 2008 Development Edition
  • Microsoft Visual Studio Team System 2008 Test Edition
  • Microsoft Visual C# 2005
  • Microsoft Visual C++ 2008 Express Edition
  • Microsoft Visual C++ 2005 Express Edition
  • Microsoft Visual Studio .NET 2003 Service Pack 1
  • Microsoft Visual Studio 2005 Professional Edition
  • Microsoft Visual Studio 2005 Service Pack 1
  • Microsoft Visual Studio 2005 Standard Edition
  • Microsoft Visual Studio 2005 Team Edition for Software Architects
  • Microsoft Visual Studio 2005 Team Edition for Software Developers
  • Microsoft Visual Studio 2005 Team Suite
Keywords: 
atdownload kbbug kbexpertiseinter kbfix kbsecbulletin kbsecurity kbsecvulnerability kbsurveynew KB969706

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com