views:

120

answers:

1

Hi all, Does anyone know if these patches http://www.microsoft.com/technet/security/bulletin/ms09-035.mspx and http://www.microsoft.com/technet/security/bulletin/ms09-034.mspx will apply to software built using one of the 'pure' (ie. not managed C++) .NET languages?

I believe the answer is that they are unaffected as this seems to be a pure ATL vulnerability, but don't have enough knowledge in the underlying usage of ATL in the CLR to know.

+8  A: 
Gavin Miller
For some reason, that tree doesn't display correctly unless you've already visited that article page where it appears. I've copied to my hosting and fixed the link so it displays correctly here now.
rwmnau
Snap - Thanks for catching that... and then fixing it!
Gavin Miller
+1 for the pretty picture.
John Saunders
Thanks - I'd seen the diagram, but wanted a second opinion :)
Kieran Benton