Microsoft DirectX NULL Byte Overwrite Vulnerability

Description

References

• blogs.technet.com/msrc/archive/2009/05/28/microsoft-security-advisory-971778-vulnerability-in-microsoft-directshow-released.aspx · Vendor Advisory
• blogs.technet.com/srd/archive/2009/05/28/new-vulnerability-in-quicktime-parsing.aspx · Vendor Advisory
• isc.sans.org/diary.html · Not Applicable
• osvdb.org/54797 · Broken Link
• secunia.com/advisories/35268 · Vendor Advisory
• microsoft.com/technet/security/advisory/971778.mspx · Patch
• securityfocus.com/bid/35139 · Broken Link
• securitytracker.com/id · Broken Link
• us-cert.gov/cas/techalerts/TA09-195A.html · US Government Resource
• vupen.com/english/advisories/2009/1445 · Vendor Advisory
• vupen.com/english/advisories/2009/1886 · Vendor Advisory

directx의 다른 취약점

• CVE-2012-1537심각 9.3Heap-based buffer overflow in DirectPlay in DirectX 9.0 through 11.1 in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows V…
• CVE-2010-1880심각 9.3Unspecified vulnerability in Quartz.dll for DirectShow on Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1, and Server…
• CVE-2010-1879심각 9.3Unspecified vulnerability in Quartz.dll for DirectShow; Windows Media Format Runtime 9, 9.5, and 11; Media Encoder 9; and the Asycfilt.dll C…
• CVE-2009-1539심각 9.3The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and …
• CVE-2009-1538심각 9.3The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and …