CVEvulnerability
CVE-2009-1539
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-07-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-94
Description
The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 does not properly validate unspecified size fields in QuickTime media files, which allows remote attackers to execute arbitrary code via a crafted file, aka "DirectX Size Validation Vulnerability."
Affected configurations
• microsoft directx 7.0
• microsoft windows 2000
• microsoft directx 8.1
• microsoft directx 9.0
• microsoft windows server 2003
• microsoft windows xp
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://osvdb.org/55845 osvdb.org
- http://www.us-cert.gov/cas/techalerts/TA09-195A.html US Government Resource
- http://www.vupen.com/english/advisories/2009/1886 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6341 oval.cisecurity.org
- http://osvdb.org/55845 osvdb.org
- http://www.us-cert.gov/cas/techalerts/TA09-195A.html US Government Resource
- http://www.vupen.com/english/advisories/2009/1886 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6341 oval.cisecurity.org