CVE-2008-0015
Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability
Exploited in the wild
This vulnerability is on the CISA Known Exploited Vulnerabilities list, added 2026-02-17. Federal due date: 2026-03-10.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft DirectShow - 'msvidctl.dll' MPEG-2 Memory Corruption (MS09-032/MS09-037) (Metasploit)2010-04-30 · local · windows · Verified
- Microsoft Internet Explorer 7 Video - ActiveX Remote Buffer Overflow2009-07-10 · remote · windows · Verified
Impact
Microsoft Windows Video ActiveX Control contains a remote code execution vulnerability. An attacker could exploit the vulnerability by constructing a specially crafted Web page. When a user views the Web page, the vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could gain the same user rights as the logged-on user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows 2003 Server | All versions |
| Microsoft | Windows Xp | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- CISA KEV catalog
- http://blogs.technet.com/srd/archive/2009/08/11/ms09-037-why-we-are-using-cve-s-already-used-in-ms09-035.aspx
- http://isc.sans.org/diary.html?storyid=6733
- http://osvdb.org/55651
- http://secunia.com/advisories/36187
- http://www.csis.dk/dk/nyheder/nyheder.asp?tekstID=799
- http://www.iss.net/threats/329.html
- http://www.kb.cert.org/vuls/id/180513
- http://www.microsoft.com/technet/security/advisory/972890.mspx
- http://www.securityfocus.com/bid/35558
- http://www.securityfocus.com/bid/35585
- http://www.securitytracker.com/id?1022514
- http://www.us-cert.gov/cas/techalerts/TA09-187A.html
- http://www.us-cert.gov/cas/techalerts/TA09-195A.html
- http://www.us-cert.gov/cas/techalerts/TA09-223A.html
- http://www.vupen.com/english/advisories/2009/2232
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-032
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-037
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6333
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6363
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7436