CVE-2009-2493

CVE-2009-2493 is a critical vulnerability in Microsoft's Active Template Library (ATL) affecting various versions of Visual Studio, Visual C++, and Windows operating systems. It allows remote attackers to execute arbitrary code by crafting an HTML document that leverages the OleLoadFromStream function to instantiate objects from data streams, bypassing security policies. This vulnerability has a CVSS score of 9.3, indicating a severe risk. It can be exploited remotely with medium attack complexity and could lead to complete compromise of confidentiality, integrity, and availability of affected systems. Despite its high severity, there is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. The vulnerability has also received minimal community discussion or media coverage, suggesting a low profile in the threat landscape.