⚠ Exploited in the wild
Exploitation observed in the wild. Not yet on CISA KEV.

CVE-2009-1537

4 documents4 sources
Severity
9.3CRITICAL
EPSS
68.1%
top 1.40%
CISA KEV
Not in KEV
Exploit
Exploited in wild
Active exploitation observed
Affected products
1
Microsoft Directx
Timeline
PublishedMay 29
Latest updateMay 2

Description

Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted QuickTime media file, as exploited in the wild in May 2009, aka "DirectX NULL Byte Overwrite Vulnerability."

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

▶NVDmicrosoft/directx9 versions+8

Patches

Patch: www.microsoft.com ↗Patch: www.microsoft.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-qvw7-mg6g-qm9m: Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz↗2022-05-02
▶
CVEList
CVE-2009-1537: Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz↗2009-05-29
▶
VulnCheck
DirectX NULL Byte Overwrite Vulnerability↗2009
▶
CVE-2009-1537 (CRITICAL CVSS 9.3) | Unspecified vulnerability in the Qu | cvebase.io