CVE-2008-0011

CWE-119 — Buffer Overflow3 documents3 sources
Severity
9.3CRITICAL
EPSS
62.3%
top 1.64%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Directx
Timeline
PublishedJun 12
Latest updateMay 1

Description

Microsoft DirectX 8.1 through 9.0c, and DirectX on Microsoft XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, does not properly perform MJPEG error checking, which allows remote attackers to execute arbitrary code via a crafted MJPEG stream in a (1) AVI or (2) ASF file, aka the "MJPEG Decoder Vulnerability."

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

▶NVDmicrosoft/directx4 versions+3

Patches

Patch: secunia.com ↗Patch: securitytracker.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-q2hg-79w4-xr3v: Microsoft DirectX 8↗2022-05-01
▶
CVEList
CVE-2008-0011: Microsoft DirectX 8↗2008-06-12
▶
CVE-2008-0011 (CRITICAL CVSS 9.3) | Microsoft DirectX 8.1 through 9.0c | cvebase.io