CVEvulnerability
CVE-2008-0011
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-06-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Microsoft DirectX 8.1 through 9.0c, and DirectX on Microsoft XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, does not properly perform MJPEG error checking, which allows remote attackers to execute arbitrary code via a crafted MJPEG stream in a (1) AVI or (2) ASF file, aka the "MJPEG Decoder Vulnerability."
Affected configurations
• microsoft directx 9.0
• microsoft directx 7.0
• microsoft directx 8.1
• microsoft directx 10.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://marc.info/?l=bugtraq&m=121380194923597&w=2 Mailing List
- http://secunia.com/advisories/30579 Patch, Vendor Advisory
- http://securitytracker.com/id?1020222 Patch
- http://www.securityfocus.com/bid/29581 Patch
- http://www.us-cert.gov/cas/techalerts/TA08-162B.html Third Party Advisory, US Government Resource
- http://www.vupen.com/english/advisories/2008/1780 Broken Link
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-033 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5236 oval.cisecurity.org
- http://marc.info/?l=bugtraq&m=121380194923597&w=2 Mailing List
- http://secunia.com/advisories/30579 Patch, Vendor Advisory
- http://securitytracker.com/id?1020222 Patch
- http://www.securityfocus.com/bid/29581 Patch
- http://www.us-cert.gov/cas/techalerts/TA08-162B.html Third Party Advisory, US Government Resource
- http://www.vupen.com/english/advisories/2008/1780 Broken Link
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-033 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5236 oval.cisecurity.org