high8.5Public exploit code
CVE-2007-3901
Stack-based buffer overflow in the DirectShow Synchronized Accessible Media Interchange (SAMI) parser in quartz.dll for Microsoft DirectX 7.0 through 10.0 allo…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft DirectX DirectShow - SAMI Buffer Overflow (MS07-064) (Metasploit)2010-10-05 · remote · windows · Verified
- Microsoft DirectX SAMI File Parsing - Remote Stack Overflow2008-01-08 · remote · windows · Verified
Impact
Stack-based buffer overflow in the DirectShow Synchronized Accessible Media Interchange (SAMI) parser in quartz.dll for Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafted SAMI file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Directx | Versions 5.2, 6.1, 7.0, 7.0a, 7.1, 8.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=632
- http://secunia.com/advisories/28010
- http://www.iss.net/threats/280.html
- http://www.kb.cert.org/vuls/id/804089
- http://www.securityfocus.com/archive/1/485268/100/0/threaded
- http://www.securityfocus.com/bid/26789
- http://www.securitytracker.com/id?1019073
- http://www.us-cert.gov/cas/techalerts/TA07-345A.html
- http://www.vupen.com/english/advisories/2007/4180
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-064
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38721
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4520
- https://www.exploit-db.com/exploits/4866
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=632
- http://secunia.com/advisories/28010
- http://www.iss.net/threats/280.html
- http://www.kb.cert.org/vuls/id/804089
- http://www.securityfocus.com/archive/1/485268/100/0/threaded
- http://www.securityfocus.com/bid/26789
- http://www.securitytracker.com/id?1019073
- http://www.us-cert.gov/cas/techalerts/TA07-345A.html
- http://www.vupen.com/english/advisories/2007/4180
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-064
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38721
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4520