84 matches found
Microsoft DirectX SAMI parser buffer overflow
Added: 01/22/2008 CVE: CVE-2007-3901 BID: 26789 OSVDB: 39126 Background DirectX is a feature of the Windows operating system used for streaming media. Problem A buffer overflow vulnerability in DirectX allows command execution when a user opens a specially crafted SAMI file in Windows Media Playe...
Microsoft DirectX SAMI File Parsing - Remote Stack Overflow
!/usr/bin/python Bug discovered by Jun Mao of VeriSign iDefense https://www.securityfocus.com/bid/26789 CVE-2007-3901 Coded by Matteo Memelli aka ryujin http://www.gray-world.net http://www.be4mind.com Tested on: Windows 2000 SP4 English, DirectX 7.0 4.07.00.0700...
Update Protection against Microsoft AVI File Parsing Remote Code Execution Vulnerability (MS07-064)
A remote code execution vulnerability has been reported in Microsoft DirectX. Microsoft DirectX is a set of libraries that aim for accelerated video and audio experience on Microsoft Windows operating system. DirectX can parse various file formats which include AVI files. A remote attacker can...
Microsoft DirectX SAMI及WAV/AVI文件解析远程代码执行漏洞（MS07-064）
BUGTRAQ ID: 26804,26789 CVECAN ID: CVE-2007-3901,CVE-2007-3895 Microsoft DirectX是Windows操作系统中的一项功能，流媒体在玩游戏或观看视频时通过这个功能支持图形和声音。 Microsoft DirectX处理畸形格式的媒体文件时存在漏洞，本地攻击者可能利用此漏洞提升自己的权限。 集成DirectX技术的Microsoft DirectShow没有对Synchronized Accessible Media...
iDefense Security Advisory 12.11.07: Microsoft DirectX 7 and 8 DirectShow Stack Buffer Overflow Vulnerability
iDefense Security Advisory 12.11.07 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 11, 2007 I. BACKGROUND Microsoft DirectShow, part of Microsoft DirectX, is used for the capture and playback of multimedia streams on Microsoft Windows systems. Synchronized Accessible Media Interchange...
Stack overflow
Stack-based buffer overflow in the DirectShow Synchronized Accessible Media Interchange SAMI parser in quartz.dll for Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafted SAMI file...
CVE-2007-3901
Stack-based buffer overflow in the DirectShow Synchronized Accessible Media Interchange SAMI parser in quartz.dll for Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafted SAMI file...
CVE-2007-3895
CVE-2007-3895 describes a buffer overflow in Microsoft DirectShow (part of DirectX) across Windows DirectX 7.0–10.0. A remote attacker could trigger code execution by convincing a user to open a specially crafted WAV or AVI file. The issue arises from improper parsing within DirectX libraries han...
Microsoft DirectX WAV and AVI File Parsing Remote Code Execution Vulnerability
Description Microsoft DirectX is prone to a remote code-execution vulnerability. An attacker could exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts may crash the application. Technologies Affected Avaya Messaging Application...
Microsoft DirectX Media SDK DXTLIPI.DLL ActiveX缓冲区溢出漏洞
Microsoft DirectX Media SDK是一组底层应用程序编程接口API。 Microsoft DirectX Media SDK DXTLIP.DLL ActiveX控件存在缓冲区溢出，远程攻击者可以利用漏洞以链接此库的应用程序执行任意指令。 问题是DXTLIP.DLL ActiveX控件在处理"SourceUrl"方法时缺少充分的边界检查，提交超长字符串作为参数数据，并诱使用户访问，可导致缓冲区溢出，精心构建提交数据可能以链接此库的应用程序执行任意指令。 Microsoft DirectX Media SDK 6.0 目前没有详细解决方案提供：...
Buffer overflow
Buffer overflow in the Live Picture Corporation DXSurface.LivePicture.FlashPix.1 DirectTransform FlashPix ActiveX control in DXTLIPI.DLL 6.0.2.827, as packaged in Microsoft DirectX Media 6.0 SDK, allows remote attackers to execute arbitrary code via a long SourceUrl property value...
Microsoft DirectX RLE压缩Targa图形文件堆溢出漏洞
BUGTRAQ ID: 24963 CVECAN ID: CVE-2006-4183 Microsoft DirectX是一个API集，用于在Windows操作系统上处理有关游戏编程的任务。 DirectX库打开RLE压缩的Targa格式图形文件的方式存在堆溢出漏洞，远程攻击者可能利用此漏洞通过诱使用户处理畸形文件控制用户系统。...
iDefense Security Advisory 07.18.07: Microsoft DirectX RLE Compressed Targa Image File Heap Overflow
Microsoft DirectX RLE Compressed Targa Image File Heap Overflow iDefense Security Advisory 07.18.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 18, 2007 I. BACKGROUND Microsoft DirectX is a collection of APIs for easily handling tasks related to game programming on the Microsoft...
[Reversemode Advisory] Microsoft DirectX RLE Compressed Targa Image File Heap Overflow
Microsoft DirectX Direct3D 9 Microsoft DirectX RLE Compressed Targa Image File Heap Overflow Ruben Santamarta rubenatreversemodedotcom 07.18.2007 Affected products: + Microsoft DirectX Direct3D 9 runtime libraries. + D3dx928.dll – D3dx9d28.dll and earlier Microsoft DirectX is prone to a heap...
Microsoft DirectX buffer overflow
Buffer overflow on compressed TGA images parsing...
CVE-2006-4183
Summary (CVE-2006-4183) : A heap-based buffer overflow exists in Microsoft DirectX when parsing RLE-compressed TGA images. The vulnerability affects the DirectX SDK (February 2006) and likely earlier End User Runtimes, enabling a remote attacker to execute arbitrary code via a crafted TGA file, d...
Microsoft DirectX DirectPlay Remote Malformed Packet Denial Of Service Vulnerability
Description Microsoft DirectX DirectPlay is affected by a remote denial of service vulnerability. This issue is due to a failure of the affected library to properly handle malformed network data. An attacker can exploit this vulnerability to cause an application using the affected DirectPlay...
Multiple bugs in ActiveX components
Local files access in applet com.ms.xml.dso.XMLDSO.class and XMLHTTPConnection ActiveX, buffer overflow in xweb.ocx ActiveX Microsoft DirectX Files Viewer, TSAC and File Transfer Manager FTM ActiveX...
