Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2007-3901
HistoryDec 12, 2007 - 12:46 a.m.

CVE-2007-3901

2007-12-1200:46:00
CWE-119
[email protected]
web.nvd.nist.gov

8.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.963 High

EPSS

Percentile

99.5%

JSON

Stack-based buffer overflow in the DirectShow Synchronized Accessible Media Interchange (SAMI) parser in quartz.dll for Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafted SAMI file.

Affected configurations

NVD
Node
microsoftwindows_2000
OR
microsoftwindows_2003_serverMatchdatacenter_edition
OR
microsoftwindows_2003_serverMatchenterprise_edition
OR
microsoftwindows_2003_serverMatchstandard
OR
microsoftwindows_2003_serverMatchweb_edition
OR
microsoftwindows_vista
OR
microsoftwindows_xphome
OR
microsoftwindows_xpprofessional
AND
microsoftdirectxMatch5.2
OR
microsoftdirectxMatch6.1
OR
microsoftdirectxMatch7.0
OR
microsoftdirectxMatch7.0a
OR
microsoftdirectxMatch7.1
OR
microsoftdirectxMatch8.0
OR
microsoftdirectxMatch8.0a
OR
microsoftdirectxMatch8.1
OR
microsoftdirectxMatch8.1a
OR
microsoftdirectxMatch8.1b
OR
microsoftdirectxMatch8.2
OR
microsoftdirectxMatch9.0a
OR
microsoftdirectxMatch9.0b
OR
microsoftdirectxMatch9.0c
OR
microsoftdirectxMatch10.0

Related

packetstorm 2
securityvulns 3
saint 4
cert 1
checkpoint_advisories 1
seebug 2
cve 1
exploitpack 1
prion 1
cvelist 1
exploitdb 1
nessus 1
openvas 2
packetstorm
packetstorm
sami-overflow.txt
2008-01-09 00:00:00
Microsoft DirectX DirectShow SAMI Buffer Overflow
2009-11-26 00:00:00
securityvulns
securityvulns
iDefense Security Advisory 12.11.07: Microsoft DirectX 7 and 8 DirectShow Stack Buffer Overflow Vulnerability
2007-12-13 00:00:00
Microsoft Windows DirectX multiple security vulnerabilities
2007-12-13 00:00:00
Microsoft Security Bulletin MS07-064 – Critical Vulnerabilities in DirectX Could Allow Remote Code Execution (941568)
2007-12-12 00:00:00
saint
saint
Microsoft DirectX SAMI parser buffer overflow
2008-01-22 00:00:00
Microsoft DirectX SAMI parser buffer overflow
2008-01-22 00:00:00
Microsoft DirectX SAMI parser buffer overflow
2008-01-22 00:00:00
cert
cert
Microsoft DirectX SAMI parsing buffer overflow
2007-12-14 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft DirectX SAMI File Parsing Code Execution (MS07-064; CVE-2007-3901)
2007-12-17 00:00:00
seebug
seebug
Microsoft DirectX SAMI File Parsing Remote Stack Overflow Exploit
2008-01-09 00:00:00
Microsoft DirectX SAMI及WAV/AVIζ–‡δ»Άθ§£ζžθΏœη¨‹δ»£η ζ‰§θ‘ŒζΌζ΄žοΌˆMS07-064οΌ‰
2007-12-13 00:00:00
cve
cve
CVE-2007-3901
2007-12-12 00:46:00
exploitpack
exploitpack
Microsoft DirectX SAMI File Parsing - Remote Stack Overflow
2008-01-08 00:00:00
prion
prion
Stack overflow
2007-12-12 00:46:00
cvelist
cvelist
CVE-2007-3901
2007-12-12 00:00:00
exploitdb
exploitdb
Microsoft DirectX SAMI File Parsing - Remote Stack Overflow
2008-01-08 00:00:00
nessus
nessus
MS07-064: Vulnerabilities in DirectX Could Allow Remote Code Execution (941568)
2007-12-11 00:00:00
openvas
openvas
Vulnerabilities in DirectX Could Allow Remote Code Execution (941568)
2011-01-14 00:00:00
Vulnerabilities in DirectX Could Allow Remote Code Execution (941568)
2011-01-14 00:00:00

8.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.963 High

EPSS

Percentile

99.5%

JSON
Related for NVD:CVE-2007-3901
packetstorm2securityvulns3saint4cert1checkpoint_advisories1seebug2cve1exploitpack1prion1cvelist1exploitdb1nessus1openvas2