CVE-2009-1537

Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted QuickTime media file, as...

CVE-2009-1537

Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted QuickTime media file, as...

CVE-2009-1537

Summary of CVE-2009-1537 (DirectShow QuickTime parsing): A remote code execution vulnerability exists in the DirectShow QuickTime Movie Parser Filter (quartz.dll) within DirectX, affecting Windows 2000 SP4, XP SP2/SP3, and Server 2003 SP2, and potentially DirectX 7.0–9.0c. Exploitation requires a...

PT-2009-4034

Name of the Vulnerable Software and Affected Versions: Microsoft DirectX versions 7.0 through 9.0c Description: The issue allows remote attackers to execute arbitrary code via a crafted QuickTime media file. This has been exploited in the wild. Recommendations: For Microsoft DirectX versions 7.0...

Microsoft DirectX DirectShow QuickTime Video Remote Code Execution Vulnerability

Description Microsoft DirectX is prone to a remote code-execution vulnerability because the DirectShow component fails to properly handle QuickTime media files. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the user running the application...

Microsoft DirectX MJPEG视频解码远程代码执行漏洞（MS09-011）

BUGTRAQ ID: 34460 CVECAN ID: CVE-2009-0084 Microsoft DirectX是Windows操作系统中的一项功能，流媒体在玩游戏或观看视频时通过这个功能支持图形和声音。 DirectX处理受支持格式文件的方式存在漏洞，如果用户受骗打开了特制的MJPEG文件就会导致执行任意代码。成功利用此漏洞的攻击者可以完全控制受影响的系统，攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 Microsoft DirectX 9.0 Microsoft DirectX 8.1 临时解决方法：...

CVE-2009-0084

Use-after-free vulnerability in DirectShow in Microsoft DirectX 8.1 and 9.0 allows remote attackers to execute arbitrary code via an MJPEG file or video stream with a malformed Huffman table, which triggers an exception that frees heap memory that is later accessed, aka "MJPEG Decompression...

Design/Logic Flaw

Use-after-free vulnerability in DirectShow in Microsoft DirectX 8.1 and 9.0 allows remote attackers to execute arbitrary code via an MJPEG file or video stream with a malformed Huffman table, which triggers an exception that frees heap memory that is later accessed, aka "MJPEG Decompression...

CVE-2009-0084

CVE-2009-0084 is a memory corruption/use-after-free vulnerability in Microsoft DirectShow (DirectX 8.1 and 9.0) that allows remote code execution when processing specially crafted MJPEG files/streams. The underlying issue is improper handling of MJPEG content (malformed Huffman tables) in DirectS...

CVE-2009-0084

Use-after-free vulnerability in DirectShow in Microsoft DirectX 8.1 and 9.0 allows remote attackers to execute arbitrary code via an MJPEG file or video stream with a malformed Huffman table, which triggers an exception that frees heap memory that is later accessed, aka "MJPEG Decompression...

Microsoft DirectShow Remote Code Execution Vulnerability (961373)

This host has critical security update missing according to Microsoft Bulletin MS09-011. OpenVAS Vulnerability Test $Id: secpodms09-011.nasl 5363 2017-02-20 13:07:22Z cfi $ Microsoft DirectShow Remote Code Execution Vulnerability 961373 Authors: Chandan S Copyright c 2009 SecPod,...

MS09-011: Vulnerability in Microsoft DirectShow Could Allow Remote Code Execution (961373)

The DirectShow component included with the version of Microsoft DirectX installed on the remote host is affected by a vulnerability that may allow execution of arbitrary code when decompressing a specially crafted MJPEG file. C Tenable Network Security, Inc. include"compat.inc"; if description...

Microsoft DirectShow Remote Code Execution Vulnerability (961373)

This host has critical security update missing according to Microsoft Bulletin MS09-011. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft DirectX DirectShow MJPEG Video Decompression Remote Code Execution Vulnerability

Description Microsoft DirectX is prone to a remote code-execution vulnerability because the DirectShow component fails to properly handle compressed media files. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the user running the application...

Microsoft Security Bulletin MS09-011 - Critical Vulnerability in Microsoft DirectShow Could Allow Remote Code Execution (961373)

Microsoft Security Bulletin MS09-011 - Critical Vulnerability in Microsoft DirectShow Could Allow Remote Code Execution 961373 Published: April 14, 2009 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Microsoft DirectX. The...

Immunity Canvas: CLOUDBURST

Name| CLOUDBURST ---|--- CVE| CVE-2009-1244 Exploit Pack| CANVAS Description| CLOUDBURST VMware Workstation Guest Escape Notes| CVE Name: CVE-2009-1244 VENDOR: VMware Notes: The exploit currently only supports a Windows Guest in a Windows Host, with "Accelerate 3D Graphics" enabled default on new...

Microsoft DirectX RCE Vulnerabilities (951698)

Microsoft DirectX is prone to multiple remote code execution RCE vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Vulnerabilities in DirectX Could Allow Remote Code Execution (951698)

This host has DirectX installed, which is prone to remote code execution vulnerabilities. OpenVAS Vulnerability Test $Id: gbms08-033.nasl 5863 2017-04-05 07:38:11Z antu123 $ Vulnerabilities in DirectX Could Allow Remote Code Execution 951698 Authors: Veerendra GG Updated by Madhuri D on 2010-12-0...

CVE-2008-0011

Microsoft DirectX 8.1 through 9.0c, and DirectX on Microsoft XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, does not properly perform MJPEG error checking, which allows remote attackers to execute arbitrary code via a crafted MJPEG stream in a 1 AVI or 2 ASF file, a...

CVE-2008-1444

Stack-based buffer overflow in Microsoft DirectX 7.0 and 8.1 on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a Synchronized Accessible Media Interchange SAMI file with crafted parameters for a Class Name variable, aka the "SAMI Format Parsing Vulnerability."...