CVEvulnerability
CVE-2009-1538
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-07-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 performs updates to pointers without properly validating unspecified data values, which allows remote attackers to execute arbitrary code via a crafted QuickTime media file, aka "DirectX Pointer Validation Vulnerability."
Affected configurations
• microsoft directx 7.0
• microsoft windows 2000
• microsoft directx 8.1
• microsoft directx 9.0
• microsoft windows server 2003
• microsoft windows xp
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://osvdb.org/55844 osvdb.org
- http://www.securityfocus.com/bid/35600 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA09-195A.html US Government Resource
- http://www.vupen.com/english/advisories/2009/1886 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5963 oval.cisecurity.org
- http://osvdb.org/55844 osvdb.org
- http://www.securityfocus.com/bid/35600 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA09-195A.html US Government Resource
- http://www.vupen.com/english/advisories/2009/1886 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5963 oval.cisecurity.org