EUVD-2014-2807

Malware in sbrugna...

EUVD-2007-1383

Malware in sbrugna...

EUVD-2009-0891

Malware in sbrugna...

CVE-2009-0894

Heap-based buffer overflow in the decodercreate function in the initialization functionality in xvidcore/src/decoder.c in Xvid before 1.2.2, as used by Windows Media Player and other applications, allows remote attackers to execute arbitrary code via vectors involving the DirectShow aka DShow...

CVE-2025-21291

Windows Direct Show Remote Code Execution Vulnerability...

SUSE CVE-2007-1387

The DirectShow loader loader/dshow/DSVideoDecoder.c in MPlayer 1.0rc1 and earlier, as used in xine-lib, does not set the biSize before use in a memcpy, which allows user-assisted remote attackers to cause a buffer overflow and possibly execute arbitrary code, a different vulnerability than...

PT-2022-2746 · Microsoft · Windows Direct Show +1

Name of the Vulnerable Software and Affected Versions: Windows Direct Show affected versions not specified Description: The issue is related to insufficient input validation in the DirectShow component of Windows operating systems. This can be exploited by a remote attacker to execute arbitrary...

PsiXBot Adds PornModule, Google DNS Service to Its Arsenal

The PsiXBot malware has made a few changes in recent weeks, including implementing Google’s DNS over HTTPS DoH and adding the blackmail-ready “PornModule” to its bag of tricks. PsiXBot is a multi-use Windows malware that has a range of capabilities, including keylogging, stealing passwords and...

Buffer Overflow Vulnerability in Virtual VCR Software

Virtual VCR is a DirectShow video capture application that allows you to capture audio and video to your hard drive in AVI file format. A buffer overflow vulnerability exists in the Virtual VCR software that can be exploited by an attacker to cause a denial of service to the server...

Microsoft Windows DirectShow Information Disclosure Vulnerability(CVE-2017-0042)

Windows Media Player in Microsoft Windows 8.1; Windows Server 2012 R2; Windows RT 8.1; Windows 7 SP1; Windows 2008 SP2 and R2 SP1, Windows Server 2016; Windows Vista SP2; and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information via a crafted web site, aka "Windo...

Microsoft Windows DirectShow Information Disclosure Vulnerability (4010318)

This host is missing an important security update according to Microsoft Bulletin MS17-021. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Windows DirectShow Information Disclosure Vulnerability

An information disclosure vulnerability exists in the way Windows DirectShow handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a target system. In a web-based attack scenario, an attacker could host a website used to...

March 2017 Security Monthly Quality Rollup for Windows 8.1 and Windows Server 2012 R2

March 2017 Security Monthly Quality Rollup for Windows 8.1 and Windows Server 2012 R2 Summary This security update resolves the following vulnerabilities in Windows 8.1 and Windows Server 2012 R2: MS17-022 Security update for Microsoft XML Core Services MS17-021 Security update for DirectShow...

March 2017 Security Only Quality Update for Windows 7 SP1 and Windows Server 2008 R2 SP1

March 2017 Security Only Quality Update for Windows 7 SP1 and Windows Server 2008 R2 SP1 Summary This security update resolves the following vulnerabilities in Windows 7 SP1 and Windows Server 2008 R2 SP1: MS17-022 Security update for Microsoft XML Core Services MS17-021 Security update for...

March 2017 Security Only Quality Update for Windows 8.1 and Windows Server 2012 R2

March 2017 Security Only Quality Update for Windows 8.1 and Windows Server 2012 R2 Summary This security update resolves the following vulnerabilities in Windows 8.1 and Windows Server 2012 R2: MS17-022 Security update for Microsoft XML Core Services MS17-021 Security update for DirectShow MS17-0...

KLA10988 Information disclosure vulnerability in Windows DirectShow

An improper objects handling in memory was found in Windows DirectShow. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited remotely via a specially designed website. Original advisories MS17-021 CVE-2017-0042 Related products...

Microsoft Windows DirectShow CVE-2017-0042 Information Disclosure Vulnerability

Description Microsoft Windows DirectShow is prone to an information-disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10...

Microsoft Windows DirectShow Information Disclosure (MS17-021: CVE-2017-0042)

An information disclosure vulnerability exists in Windows DirectShow. The vulnerability is due to the way Windows DirectShow handles objects in memory. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

MS17-021: Security update for Windows DirectShow: March 14, 2017

Resolves a vulnerability in Windows that could allow information disclosure if Windows DirectShow opens specially crafted media content that is hosted on a malicious website.SummaryThis security update resolves a vulnerability in Microsoft Windows. This vulnerability could allow information...

MS14-013: Vulnerability in Microsoft DirectShow could allow remote code execution: March 11, 2014

MS14-013: Vulnerability in Microsoft DirectShow could allow remote code execution: March 11, 2014 INTRODUCTION Microsoft has released security bulletin MS14-013. To learn more about this security bulletin: Home users: http://www.microsoft.com/security/pc-security/updates.aspxSkip the details:...