CVE-2009-1537

Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000...

Basic Information

CVE State: PUBLISHED
Reserved Date: May 05, 2009
Published Date: May 29, 2009
Last Updated: August 07, 2024
Vendor: Microsoft
Product: DirectX
Description: Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted QuickTime media file, as exploited in the wild in May 2009, aka "DirectX NULL Byte Overwrite Vulnerability."
Tags

CVSS Scores

CVSS v2.0

9.3

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploit Status

Exploited in the Wild: Yes (2009-05-29 18:00:00 UTC) Source

References

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028 http://blogs.technet.com/srd/archive/2009/05/28/new-vulnerability-in-quicktime-parsing.aspx https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6237 http://secunia.com/advisories/35268 http://www.securitytracker.com/id?1022299 http://www.vupen.com/english/advisories/2009/1886 http://www.vupen.com/english/advisories/2009/1445 http://osvdb.org/54797 http://www.securityfocus.com/bid/35139 http://www.us-cert.gov/cas/techalerts/TA09-195A.html http://isc.sans.org/diary.html?storyid=6481 http://www.microsoft.com/technet/security/advisory/971778.mspx http://blogs.technet.com/msrc/archive/2009/05/28/microsoft-security-advisory-971778-vulnerability-in-microsoft-directshow-released.aspx

Known Exploited Vulnerability Information

Source	Added Date
CVE	2009-05-29 18:00:00 UTC

Timeline

CVE ID Reserved

May 05, 2009
CVE Published to Public

May 29, 2009
Added to KEVIntel

May 29, 2009