CVEvulnerability
CVE-2012-0004
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-01-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Unspecified vulnerability in DirectShow in DirectX in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted media file, related to Quartz.dll, Qdvd.dll, closed captioning, and the Line21 DirectShow filter, aka "DirectShow Remote Code Execution Vulnerability."
Affected configurations
• microsoft windows 7
• microsoft windows server 2003
• microsoft windows server 2008
• microsoft windows server 2008 r2
• microsoft windows vista
• microsoft windows xp
• microsoft windows xp 2005
References
- http://secunia.com/advisories/47485 secunia.com
- http://www.securityfocus.com/bid/51295 www.securityfocus.com
- http://www.securitytracker.com/id?1026492 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA12-010A.html US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-004 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14832 oval.cisecurity.org
- http://secunia.com/advisories/47485 secunia.com
- http://www.securityfocus.com/bid/51295 www.securityfocus.com
- http://www.securitytracker.com/id?1026492 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA12-010A.html US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-004 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14832 oval.cisecurity.org