EDB-16442
remotewindowsVERIFIED
Microsoft DirectX DirectShow - SAMI Buffer Overflow (MS07-064) (Metasploit)
CVE-2007-3901
Metasploit10/5/2010
CVE-2007-3901
NONEStack-based buffer overflow in the DirectShow Synchronized Accessible Media Interchange (SAMI) parser in quartz.dll for Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary
Publicado: 12/12/2007Atualizado: 4/9/2025
Descrição
Stack-based buffer overflow in the DirectShow Synchronized Accessible Media Interchange (SAMI) parser in quartz.dll for Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafted SAMI file.
Análise IADesenvolvido por IA
Produtos Afetados
microsoftwindows_2000
microsoftwindows_2003_server
datacenter_edition
microsoftwindows_2003_server
enterprise_edition
microsoftwindows_2003_server
standard
microsoftwindows_2003_server
web_edition
microsoftwindows_vista
microsoftwindows_xp
microsoftwindows_xp
microsoftdirectx
5.2
microsoftdirectx
6.1
microsoftdirectx
7.0
microsoftdirectx
7.0a
microsoftdirectx
7.1
microsoftdirectx
8.0
microsoftdirectx
8.0a
microsoftdirectx
8.1
microsoftdirectx
8.1a
microsoftdirectx
8.1b
microsoftdirectx
8.2
microsoftdirectx
9.0a
microsoftdirectx
9.0b
microsoftdirectx
9.0c
microsoftdirectx
10.0
Exploits Disponíveis (2)
Referências
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=632
- http://secunia.com/advisories/28010Vendor Advisory
- http://www.iss.net/threats/280.html
- http://www.kb.cert.org/vuls/id/804089US Government Resource
- http://www.securityfocus.com/archive/1/485268/100/0/threaded
- http://www.securityfocus.com/bid/26789
- http://www.securitytracker.com/id?1019073
- http://www.us-cert.gov/cas/techalerts/TA07-345A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2007/4180Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-064
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38721
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4520
- https://www.exploit-db.com/exploits/4866
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=632
- http://secunia.com/advisories/28010Vendor Advisory
- http://www.iss.net/threats/280.html
- http://www.kb.cert.org/vuls/id/804089US Government Resource
- http://www.securityfocus.com/archive/1/485268/100/0/threaded
- http://www.securityfocus.com/bid/26789
- http://www.securitytracker.com/id?1019073