high8.8Known exploited
CVE-2009-1537
Microsoft DirectX NULL Byte Overwrite Vulnerability
Exploited in the wild
This vulnerability is on the CISA Known Exploited Vulnerabilities list, added 2026-05-20. Federal due date: 2026-06-03.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Impact
Microsoft DirectX contains a NULL byte overwrite vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow which could allow remote attackers to execute arbitrary code via a crafted QuickTime media file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Directx | Versions 7.0, 7.0a, 7.1, 8.1, 8.1b, 9.0 |
| Microsoft | Windows 2000 | All versions |
| Microsoft | Windows 2003 Server | All versions |
| Microsoft | Windows Server 2003 | All versions |
| Microsoft | Windows Xp | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- CISA KEV catalog
- http://blogs.technet.com/msrc/archive/2009/05/28/microsoft-security-advisory-971778-vulnerability-in-microsoft-directshow-released.aspx
- http://blogs.technet.com/srd/archive/2009/05/28/new-vulnerability-in-quicktime-parsing.aspx
- http://isc.sans.org/diary.html?storyid=6481
- http://osvdb.org/54797
- http://secunia.com/advisories/35268
- http://www.microsoft.com/technet/security/advisory/971778.mspx
- http://www.securityfocus.com/bid/35139
- http://www.securitytracker.com/id?1022299
- http://www.us-cert.gov/cas/techalerts/TA09-195A.html
- http://www.vupen.com/english/advisories/2009/1445
- http://www.vupen.com/english/advisories/2009/1886
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6237
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-1537