Microsoft warns of dangerous DirectShow flaw, attacks

Microsoft today warned that hackers are using rigged QuickTime media files to exploit an unpatched vulnerability in DirectShow, the APIs used by Windows programs for multimedia support. The company has activated its security response process to deal with the zero-day attacks has issued a pre-patc...

Microsoft DirectX DirectShow QuickTime Video Remote Code Execution Vulnerability

Description Microsoft DirectX is prone to a remote code-execution vulnerability because the DirectShow component fails to properly handle QuickTime media files. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the user running the application...

Microsoft DirectX MJPEG视频解码远程代码执行漏洞（MS09-011）

BUGTRAQ ID: 34460 CVECAN ID: CVE-2009-0084 Microsoft DirectX是Windows操作系统中的一项功能，流媒体在玩游戏或观看视频时通过这个功能支持图形和声音。 DirectX处理受支持格式文件的方式存在漏洞，如果用户受骗打开了特制的MJPEG文件就会导致执行任意代码。成功利用此漏洞的攻击者可以完全控制受影响的系统，攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 Microsoft DirectX 9.0 Microsoft DirectX 8.1 临时解决方法：...

CVE-2009-0084

Use-after-free vulnerability in DirectShow in Microsoft DirectX 8.1 and 9.0 allows remote attackers to execute arbitrary code via an MJPEG file or video stream with a malformed Huffman table, which triggers an exception that frees heap memory that is later accessed, aka "MJPEG Decompression...

Design/Logic Flaw

Use-after-free vulnerability in DirectShow in Microsoft DirectX 8.1 and 9.0 allows remote attackers to execute arbitrary code via an MJPEG file or video stream with a malformed Huffman table, which triggers an exception that frees heap memory that is later accessed, aka "MJPEG Decompression...

CVE-2009-0084

CVE-2009-0084 is a memory corruption/use-after-free vulnerability in Microsoft DirectShow (DirectX 8.1 and 9.0) that allows remote code execution when processing specially crafted MJPEG files/streams. The underlying issue is improper handling of MJPEG content (malformed Huffman tables) in DirectS...

CVE-2009-0084

Use-after-free vulnerability in DirectShow in Microsoft DirectX 8.1 and 9.0 allows remote attackers to execute arbitrary code via an MJPEG file or video stream with a malformed Huffman table, which triggers an exception that frees heap memory that is later accessed, aka "MJPEG Decompression...

Microsoft DirectShow Remote Code Execution Vulnerability (961373)

This host has critical security update missing according to Microsoft Bulletin MS09-011. OpenVAS Vulnerability Test $Id: secpodms09-011.nasl 5363 2017-02-20 13:07:22Z cfi $ Microsoft DirectShow Remote Code Execution Vulnerability 961373 Authors: Chandan S Copyright c 2009 SecPod,...

Microsoft DirectShow Remote Code Execution Vulnerability (961373)

This host has critical security update missing according to Microsoft Bulletin MS09-011. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS09-011: Vulnerability in Microsoft DirectShow Could Allow Remote Code Execution (961373)

The DirectShow component included with the version of Microsoft DirectX installed on the remote host is affected by a vulnerability that may allow execution of arbitrary code when decompressing a specially crafted MJPEG file. C Tenable Network Security, Inc. include"compat.inc"; if description...

Microsoft DirectShow memory corruption

Memory corruption on Motion JPEG files decompression...

Microsoft Security Bulletin MS09-011 - Critical Vulnerability in Microsoft DirectShow Could Allow Remote Code Execution (961373)

Microsoft Security Bulletin MS09-011 - Critical Vulnerability in Microsoft DirectShow Could Allow Remote Code Execution 961373 Published: April 14, 2009 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Microsoft DirectX. The...

Microsoft DirectShow MJPEG Decompression Remote Code Execution (MS09-011; CVE-2009-0084)

Microsoft DirectShow is used for streaming media on Microsoft Windows operating systems. The DirectShow technology performs client-side audio and video sourcing, manipulation and rendering.An MJPEG file is a media file where a number of JPEG images are connected together to create a video stream...

Ubuntu: Security Advisory (USN-435-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for xine-lib vulnerability USN-435-1

Ubuntu Update for Linux kernel vulnerabilities USN-435-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4351.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for xine-lib vulnerability USN-435-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

CVE-2008-5745

Integer overflow in quartz.dll in the DirectShow framework in Microsoft Windows Media Player WMP 9, 10, and 11, including 11.0.5721.5260, allows remote attackers to cause a denial of service application crash via a crafted 1 WAV, 2 SND, or 3 MID file. NOTE: this has been incorrectly reported as a...

CVE-2008-5745

Microsoft Windows Media Player (WMP) 9–11 suffers an integer overflow in quartz.dll (DirectShow) that can be triggered by crafted WAV, SND, or MID files, causing an application crash (DoS). This aligns with CVE-2008-5745; related entries exist for CVE-2008-4927. Technical details about impact vec...

Ffdshow < rev2347_20081123 Remote Buffer Overflow

ffdshow, a DirectShow filter and VFW codec for multiple audio and video formats, is installed on the remote host. ffdshow is available as a standalone package but is typically bundled with third-party codec software such as K-lite Codec Pack, XP Codec Pack, Vista Codec Package and Codec Pack...

Null pointer dereference

Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier, including Illiminable DirectShow Filters and Annodex Plugins for Firefox, xine-lib before 1.1.12, and many other products, allows remote attackers to execute arbitrary code via a header structure...

CVE-2008-1686

Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier, including Illiminable DirectShow Filters and Annodex Plugins for Firefox, xine-lib before 1.1.12, and many other products, allows remote attackers to execute arbitrary code via a header structure...