The host is missing a moderate security update according to Microsoft security bulletin, MS09-035. The update is required to fix remote code execution vulnerabilities. The flaws are present in the Microsoft Active Template Library (ATL) included with Visual Studio, which allows an attacker to force VariantClear to be called on a VARIANT that has not been correctly initialized and to read a string without a terminating NULL character and fails to handle instantiation of an object from data streams. Successful exploitation could allow an attacker to gain the user rights and take complete control of an affected system.