Secunia

Two vulnerabilities have been reported in Microsoft DirectX, which can be exploited by malicious people to compromise a vulnerable system.

1) An error in the Windows MJPEG Codec when performing error checking on MJPEG video streams embedded in ASF or AVI media files can be exploited to execute arbitrary code via a specially crafted MJPEG file.

2) A boundary error in the parsing of "Class Name" variables in SAMI (Synchronized Accessible Media Interchange) files can be exploited to cause a stack-based buffer overflow via a specially crafted SAMI file.

Successful exploitation allows execution of arbitrary code.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
The vendor credits:
1) Mark Dowd, IBM Internet Security Systems X-Force
2) An anonymous researcher, reported via ZDI

Changelog
Further details available in Customer Area

Original Advisory
MS08-033 (951698):
http://www.microsoft.com/technet/security/Bulletin/MS08-033.mspx

ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-08-040/

Deep Links
Links available in Customer Area