CVE-2008-0011

Microsoft DirectX contains two CVEs (CVE-2008-0011 and CVE-2008-1444) related to MJPEG and SAMI parsing, enabling remote code execution when a user opens specially crafted AVI/ASF/SAMI files. Affected products span DirectX components on Windows XP SP2/SP3, Server 2003, Windows Vista, and Windows ...

Microsoft DirectX SAMI文件及MJPEG视频流解析栈溢出漏洞（MS08-032）

BUGTRAQ ID: 29581,29578 CVECAN ID: CVE-2008-0011,CVE-2008-1444 Microsoft DirectX是Windows操作系统中的一项功能，流媒体在玩游戏或观看视频时通过这个功能支持图形和声音。 DirectX在解析SAMI文件中的Class Name变量属性参数时存在栈溢出漏洞，Windows MJPEG Codec在解析ASF或AVI媒体文件中内嵌的MJPEG音频流时存在另一个栈溢出漏洞。如果用户受骗打开或预览了恶意的媒体文件的话，就可以触发这些溢出，导致执行任意指令。 Microsoft DirectX 9.0...

CVE-2008-0011: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft DirectX 8.1 through 9.0c, and DirectX on Microsoft XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, does not properly perform MJPEG error checking, which allows remote attackers to execute arbitrary code via a crafted MJPEG stream in a 1 AVI or 2 ASF file, a...

Microsoft DirectX code execution

MJPEG format AVI and ASF files parsing vulnerability, SAMI files parsing vulnerability...