CVE-2007-1387

The DirectShow loader loader/dshow/DSVideoDecoder.c in MPlayer 1.0rc1 and earlier, as used in xine-lib, does not set the biSize before use in a memcpy, which allows user-assisted remote attackers to cause a buffer overflow and possibly execute arbitrary code, a different vulnerability than...

CVE-2007-1387

The CVE-2007-1387 entry concerns the DirectShow loader (loader/dshow/DS_VideoDecoder.c) in MPlayer 1.0rc1 and earlier, used by xine-lib. The root cause is failure to set biSize before memcpy, which can cause a buffer overflow and potentially allow remote code execution. The provided documents do ...

USN-435-1: Xine vulnerability

Moritz Jodeit discovered that the DirectShow loader of Xine did not correctly validate the size of an allocated buffer. By tricking a user into opening a specially crafted media file, an attacker could execute arbitrary code with the user's privileges...

[EEYEB20050510] - Microsoft DirectShow Remote Code Vulnerability

Microsoft DirectShow Remote Code Vulnerability Release Date: October 11, 2005 Date Reported: May 10, 2005 Severity: High Code Execution Vendor: Microsoft Systems Affected: Windows 98, 98SE, ME Windows 2000 SP4 - Microsoft DirectX 8.0 - 9.0c Windows XP SP1 - SP2 - DirectX 9.0 - 9.0c Windows Server...

Microsoft Security Bulletin MS05-050 Vulnerability in DirectShow Could Allow Remote Code Execution (904706)

Microsoft Security Bulletin MS05-050 Vulnerability in DirectShow Could Allow Remote Code Execution 904706 Published: October 11, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating:...

MS05-050: Vulnerability in DirectShow Could Allow Remote Code Execution (904706)

The remote host contains a version of DirectX that is vulnerable to a remote code execution flaw. To exploit this flaw, an attacker would need to send a specially malformed .avi file to a user on the remote host and have him open it. C Tenable Network Security, Inc. include"compat.inc"; if...

Microsoft DirectShow buffer overflow

Overview A buffer overflow in Microsoft DirectShow may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft DirectShow is a programming architecture for streaming multimedia on the Microsoft Windows platform. An input validation error in...

CVE-1999-0989

CVE-1999-0989 affects Internet Explorer 5, specifically the MSDXM.OCX DirectShow filter. The vulnerability is a buffer overflow in the vnd.ms.radio protocol that could allow remote command execution. The CVSS v2 base score is 7.5 (HIGH) with a network attack vector, low access complexity, and no ...

Security Update for Windows 2000 (KB951698)

A security issue has been identified in Microsoft DirectShow that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your comput...

Security Update for Windows Server 2003 x64 Edition (KB951698)

A security issue has been identified in Microsoft DirectShow that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your comput...

Security Update for DirectX 8 for Windows 2000 (KB951698)

A security issue has been identified in Microsoft DirectShow that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your comput...

Security Update for Windows Vista for x64-based Systems (KB951698)

A security issue has been identified in Microsoft DirectShow that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your...

Security Update for Windows Server 2003 for Itanium-based Systems (KB951698)

A security issue has been identified in Microsoft DirectShow that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your comput...

Security Update for DirectX 9 for Windows 2000 (KB951698)

A security issue has been identified in Microsoft DirectShow that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your comput...

Security Update for Windows XP x64 Edition (KB951698)

A security issue has been identified in Microsoft DirectShow that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your comput...

Security Update for Windows Server 2003 (KB951698)

A security issue has been identified in Microsoft DirectShow that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your comput...

Security Update for Windows Vista (KB951698)

A security issue has been identified in Microsoft DirectShow that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your...

Security Update for Windows XP (KB951698)

A security issue has been identified in Microsoft DirectShow that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your comput...

Security Update for Windows Server 2008 (KB951698)

A security issue has been identified in Microsoft DirectShow that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your...

Security Update for DirectX 9 for Windows 2000 (KB941568)

A security issue has been identified in Microsoft DirectShow that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your comput...