CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
1 advisories matched
2009-05-29
Microsoft DirectX DirectShow QuickTime Parser Remote Code Execution Vulnerability (CVE-2009-1537, KEV Listed)
[Affected Scope] DirectShow (quartz.dll) in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2/SP3, and Windows Server 2003 SP2
[Impact] Remote attackers can execute arbitrary code with the privileges of the logged-in user by tricking them into opening a specially crafted QuickTime media file
[Mitigation] Apply the official Microsoft security updates (MS09-028) or disable the QuickTime Movie Parser Filter via registry modification (Kill-bit)