Login Request a demo
Unscored severity · published Apr 15, 2009
CVE-2009-0084
Use-after-free vulnerability in DirectShow in Microsoft DirectX 8.1 and 9.0 allows remote attackers to execute arbitrary code via an MJPEG file or video stream with a malformed…
–
CVSS
31.8%
EPSS
No
On KEV
Description
Use-after-free vulnerability in DirectShow in Microsoft DirectX 8.1 and 9.0 allows remote attackers to execute arbitrary code via an MJPEG file or video stream with a malformed Huffman table, which triggers an exception that frees heap memory that is later accessed, aka "MJPEG Decompression Vulnerability."
Exploitation
Is it being used?
Exploit prediction (EPSS)31.8% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DI
Directx · Microsoft
8.1; 9.0; 9.0a; 9.0b; 9.0c · source: NVD
Affected product
DI
Directx
Microsoft
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-0084
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-0084
osvdb.org
http://osvdb.org/53632
secunia.com
http://secunia.com/advisories/34665
support.avaya.com
http://support.avaya.com/elmodocs2/security/ASA-2009-132.htm
www.piotrbania.com
http://www.piotrbania.com/all/adv/ms-directx-mjpeg-adv.txt
www.securityfocus.com
http://www.securityfocus.com/bid/34460
www.securitytracker.com
http://www.securitytracker.com/id?1022040
More from Directx
8.8
CVE-2009-1537
Microsoft DirectX NULL Byte Overwrite Vulnerability
–
CVE-2012-1537
Heap-based buffer overflow in DirectPlay in DirectX 9.0 through 11.1 in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2,…
–
CVE-2010-1880
Unspecified vulnerability in Quartz.dll for DirectShow on Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1, and Server 2008 allows remote attackers to…
–
CVE-2010-1879
Unspecified vulnerability in Quartz.dll for DirectShow; Windows Media Format Runtime 9, 9.5, and 11; Media Encoder 9; and the Asycfilt.dll COM component allows remote attackers to…
–
CVE-2009-1539
The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 does…